PT-2024-33820 · Linux+7 · Linux Kernel+7
Willem De Bruijn
·
Published
2024-10-21
·
Updated
2026-05-26
·
CVE-2024-49978
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue concerns the Linux kernel, where a vulnerability has been resolved related to the handling of UDP GSO fraglist segmentation after data is pulled from the frag list. This occurs when optional datapath hooks, such as NAT and BPF, modify SKBs, breaking their invariants. In extreme cases, this can cause a NULL pointer dereference. The fix involves detecting SKBs with corrupted geometry and passing them to skb segment instead of skb segment list.
Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the use of optional datapath hooks such as NAT and BPF to minimize the risk of exploitation.
Exploit
Fix
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu