PT-2024-29871 · Linux+10 · Linux Kernel+10

Published 2024-06-27 · Updated 2026-05-26 · CVE-2024-42322

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the ipvs module in the Linux kernel, where a vulnerability has been resolved by properly dereferencing pe in ip vs add service. This change also resolves a sparse warning. The vulnerability is related to the function ip vs add service and the variable pe.

Recommendations Update to Linux kernel version 6.6.50 or later to resolve the issue. As a temporary workaround, consider restricting access to the ipvs module until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_16880

BDU:2025-08031

CESA-2024_7000

CESA-2024_7001

CVE-2024-42322

DLA-4008-1

DLA-4178-1

DSA-5818-1

INFSA-2024_7000

INFSA-2024_7001

INFSA-2025_4341

MGASA-2024-0309

MGASA-2024-0310

OESA-2024-2255

OESA-2024-2257

OESA-2024-2258

OESA-2024-2296

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3483-1

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024_7000

RHSA-2024_7001

RHSA-2025:4341

RHSA-2025:4509

RHSA-2025_4341

RLSA-2024:7001

SUSE-SU-2024:3189-1

SUSE-SU-2024:3190-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3251-1

SUSE-SU-2024:3252-1

SUSE-SU-2024:3383-1

SUSE-SU-2024:3483-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

USN-7654-1

USN-7654-2

USN-7654-3

USN-7654-4

USN-7654-5

USN-7655-1

USN-7686-1

USN-7711-1

USN-7712-1

USN-7712-2

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2694

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42322.json · Exploit
• https://ubuntu.com/security/CVE-2024-41064 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38541 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42114 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46672 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46761 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-44975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46716 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7655-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42272 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42092 · Vendor Advisory