PT-2024-5794 · Linux+6 · Linux Kernel+6
Sabrina Dubroca
·
Published
2024-05-21
·
Updated
2025-09-29
·
CVE-2024-39489
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a memory leak in the Linux kernel's ipv6 component, specifically in the seg6 hmac init algo function. This function returns without cleaning up previous allocations if one fails, leading to a memory leak and potential denial of service. The vulnerability can be exploited to cause a denial of service.
Recommendations
Update the Linux kernel to a version that includes the fix for the memleak in seg6 hmac init algo.
As a temporary workaround, consider disabling the seg6 hmac init algo function until a patch is available.
Restrict access to the ipv6 component to minimize the risk of exploitation.
Exploit
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu