PT-2024-10327 · Linux · Linux Kernel

Jakub Kicinski · Published 2024-07-11 · Updated 2024-08-22 · CVE-2024-43836

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible null dereference in the Linux kernel when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in the ethnl set pse validate() call. This could potentially allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-00779

CVE-2024-43836

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43836.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2024-43836 · Vendor Advisory
• https://git.kernel.org/stable/c/e187690b125a297499eadeec53c32c5ed6d7436a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-43836 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-43836 · Security Note
• https://git.kernel.org/stable/c/4cddb0f15ea9c62f81b4889ea69a99368cc63a86 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43836 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43836 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00779 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43836 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-43836 · Vendor Advisory
• https://docs.bell-sw.com/security/cves/CVE-2024-43836 · Note
• https://lore.kernel.org/linux-cve-announce/2024081729-CVE-2024-43836-d81d@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note