PT-2024-36953 · Linux+10 · Linux Kernel+10

Jiri Wiesner

·

Published

2024-11-28

·

Updated

2026-01-12

·

CVE-2024-56644

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74
Description A vulnerability in the Linux kernel has been resolved, related to the net/ipv6 module. The issue occurs when an ICMPv6 packet indicating a change of the MTU for the path is received, resulting in an exception dst being created. If a TCP connection that uses the exception dst for routing packets starts timing out, and the FIB6 garbage collector does not run before TCP executes ip6 negative advice() for the expired exception dst, a dst leak can occur. This leak can cause an unbalanced refcount to be reported for the loopback device of a net namespace being destroyed. The vulnerability is not present in the IPv4 version, ipv4 negative advice().
Recommendations To resolve the issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider disabling the ip6 negative advice() function until a patch is available. Restrict access to the vulnerable module net/ipv6 to minimize the risk of exploitation. Avoid using the dst init() and dst hold() functions in the affected API endpoint until the issue is resolved.

Exploit

Fix

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2025-12647
BDU:2025-06094
CESA-2025_13589
CVE-2024-56644
DLA-4075-1
DLA-4076-1
INFSA-2025_13589
INFSA-2025_6966
MGASA-2025-0030
MGASA-2025-0032
OESA-2025-1286
OESA-2025-1450
OPENSUSE-SU-2025_0428-1
OPENSUSE-SU-2025_0499-1
OPENSUSE-SU-2025_0556-1
OPENSUSE-SU-2025_0557-1
OPENSUSE-SU-2025_0577-1
RHSA-2025:13589
RHSA-2025:6966
RHSA-2025_13589
RHSA-2025_6966
SUSE-SU-2025:0289-1
SUSE-SU-2025:0428-1
SUSE-SU-2025:0499-1
SUSE-SU-2025:0556-1
SUSE-SU-2025:0557-1
SUSE-SU-2025:0577-1
SUSE-SU-2025:0577-2
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
SUSE-SU-2025_0428-1
SUSE-SU-2025_0499-1
SUSE-SU-2025_0557-1
SUSE-SU-2025_0577-1
SUSE-SU-2025_0577-2
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7387-1
USN-7387-2
USN-7387-3
USN-7388-1
USN-7389-1
USN-7390-1
USN-7391-1
USN-7392-1
USN-7392-2
USN-7392-3
USN-7392-4
USN-7393-1
USN-7401-1
USN-7407-1
USN-7413-1
USN-7421-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7458-1
USN-7459-1
USN-7459-2
USN-7463-1
USN-7468-1
USN-7523-1
USN-7524-1
USN-7539-1
USN-7540-1

Affected Products

Alt Linux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu