PT-2024-33873 · Linux+8 · Linux Kernel+8
Syzbot
·
Published
2024-10-10
·
Updated
2025-10-03
·
CVE-2024-50033
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A vulnerability has been resolved in the Linux kernel, specifically in the
slhc remember() function, which was found to be missing checks against malicious packets. The function only checked if the packet size was at least 20, which is not sufficient. To fix this, the code now includes checks to ensure the packet includes the IPv4 and TCP headers that are supposed to be carried. The slhc remember() function has been made more robust against malicious packets.Recommendations:
To resolve the issue, update the Linux kernel to version 6.6.58 or later.
As a temporary workaround, consider restricting access to the
slhc remember() function until a patch is available.Exploit
Fix
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu