PT-2024-21440 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-02-06
·
Updated
2025-09-29
·
CVE-2024-26663
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the tipc component in the Linux kernel. When the
tipc nl bearer add() function is called with the TIPC NLA BEARER UDP OPTS attribute, tipc udp nl bearer add() is called even if the bearer is not UDP. The tipc udp is known peer() function, called by tipc udp nl bearer add(), assumes that the media ptr field of the tipc bearer has a udp bearer type object. If the bearer is not UDP, this assumption leads to incorrect behavior. The patch fixes the issue by checking the bearer type before calling tipc udp nl bearer add() in tipc nl bearer add().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu