CVE-2024-27417

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

published May 17, 2024

CVSS
—
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

It seems that if userspace provides a correct IFA_TARGET_NETNSID value

but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr()

returns -EINVAL with an elevated "struct net" refcount.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.2th percentile
Published
2024-05-17T11:51Z
EPSS history
Timeline
  • 17 MAY 11:51Z
    ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
    cvelistv5