CVE-2024-35960CWE-476

CVE-2024-35960

Critical · published May 20, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

🔥 A sneaky flaw in the Linux kernel could send your flow group crashing down when deleting rules! ⚠️ Think of it like a team of workers trying to organize a warehouse. If one worker adds a new shelf but forgets to properly link it to the overall layout, it could cause chaos when trying to remove items later — like discovering a shelf without a connection to the main structure! This vulnerability can lead to a system crash when the flow group attempts to delete a node that mistakenly lacks a parent connection. The result? An absolute fiasco, as it could bring your system to a standstill and disrupt operations. It's critical to address this before it catches you off guard!

Put simply

Think of it like a team of workers trying to organize a warehouse. If one worker adds a new shelf but forgets to properly link it to the overall layout, it could cause chaos when trying to remove items later — like discovering a shelf without a connection to the main structure! The vulnerability occurs in the Linux kernel's handling of flow rules, specifically when newly created rules are not properly linked into the tree structure, resulting in a NULL parent reference during deletion. This inconsistency can cause crashes when the system attempts to manage flow rules.

What to do

This vulnerability can lead to a system crash when the flow group attempts to delete a node that mistakenly lacks a parent connection. The result? An absolute fiasco, as it could bring your system to a standstill and disrupt operations. It's critical to address this before it catches you off guard! Update your Linux kernel to the patched version promptly to protect against this issue. Ensure that the flow rules are correctly linked to prevent potential crashes when performing deletions. Regularly review your kernel updates to keep your systems secure! You've got this! With these updates, you'll keep your systems running smoothly and securely! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01413 · 72.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-05-20T14:15Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 4.10, < 4.19.3134.19.313
linux/linux_kernel≥ 4.20, < 5.4.2755.4.275
linux/linux_kernel≥ 5.5, < 5.10.2165.10.216
linux/linux_kernel≥ 5.11, < 5.15.1565.15.156
linux/linux_kernel≥ 5.16, < 6.1.876.1.87
linux/linux_kernel≥ 6.2, < 6.6.286.6.28
linux/linux_kernel≥ 6.7, < 6.8.76.8.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (20)
https://git.kernel.org/stable/c/1263b0b26077b1183c3c45a0a2479573a351d423 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2e8dc5cffc844dacfa79f056dea88002312f253f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3d90ca9145f6b97b38d0c2b6b30f6ca6af9c1801 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5cf5337ef701830f173b4eec00a4f984adeb57a0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7aaee12b804c5e0374e7b132b6ec2158ff33dd64 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7c6782ad4911cbee874e85630226ed389ff2e453 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/adf67a03af39095f05d82050f15813d6f700159d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/de0139719cdda82806a47580ca0df06fc85e0bd2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1263b0b26077b1183c3c45a0a2479573a351d423 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/2e8dc5cffc844dacfa79f056dea88002312f253f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/3d90ca9145f6b97b38d0c2b6b30f6ca6af9c1801 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/5cf5337ef701830f173b4eec00a4f984adeb57a0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7aaee12b804c5e0374e7b132b6ec2158ff33dd64 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7c6782ad4911cbee874e85630226ed389ff2e453 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/adf67a03af39095f05d82050f15813d6f700159d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/de0139719cdda82806a47580ca0df06fc85e0bd2 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 20 MAY 09:41Z
    net/mlx5: Properly link new fs rules into the tree
    cvelistv5