CVE-2024-46677

gtp: fix a potential NULL pointer dereference

published September 13, 2024

CVSS
—
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gtp: fix a potential NULL pointer dereference

When sockfd_lookup() fails, gtp_encap_enable_socket() returns a

NULL pointer, but its callers only check for error pointers thus miss

the NULL pointer case.

Fix it by returning an error pointer with the error code carried from

sockfd_lookup().

(I found this bug during code inspection.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Published
2024-09-13T05:29Z
EPSS history
Timeline
  • 13 SEP 05:29Z
    gtp: fix a potential NULL pointer dereference
    cvelistv5