PT-2024-33821 · Linux+2 · Linux Kernel+2

Felix Fietkau

+1

·

Published

2024-09-26

·

Updated

2025-02-28

·

CVE-2024-49979

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue concerns the Linux kernel's handling of TCP fragmentation. Specifically, it involves the net: gso: fix tcp fraglist segmentation after pull from frag list fix, which addresses a problem where optional datapath hooks like NAT and BPF can modify SKB GSO FRAGLIST skbs, breaking their invariants. This can lead to a NULL pointer dereference in tcpv4 gso segment list csum at tcp hdr(seg->next). The solution involves detecting invalid geometry due to pull by checking the head skb size and converting it to be able to pass to regular skb segment instead of skb segment list.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-16134
CVE-2024-49979
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7310-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu