PT-2024-29821 · Linux+6 · Linux Kernel+6
Kuniyuki Iwashima
·
Published
2024-07-31
·
Updated
2025-09-29
·
CVE-2024-42269
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to a potential null pointer dereference in the
ip6table nat table init() function. This function accesses net->gen->ptr[ip6table nat net ops.id], but it is exposed to user space before the entry is allocated via register pernet subsys(). To fix this, register pernet subsys() should be called before xt register template().Recommendations
To resolve the issue, update to Linux kernel version 6.6.50 or later. As a temporary workaround, consider restricting access to the
ip6table nat table init() function until a patch is available.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu