PT-2024-8999 · Linux+5 · Linux Kernel+5

Published

2024-05-30

·

Updated

2025-02-03

·

CVE-2024-36937

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to the xdp component of the Linux kernel and involves a NULL pointer dereference. When redirecting a packet using XDP, the bpf redirect map() helper sets up the redirect destination information in struct bpf redirect info. The xdp do redirect() function reads this information after the XDP program returns and passes the frame on to the right redirect destination. However, if the destination map is being destroyed before xdp do redirect() is called, the map pointer will be cleared out without waiting for any XDP programs to stop running, causing a crash when a NULL pointer is passed to dev map enqueue(). The fix involves changing xdp do redirect() to react directly to the presence of the BPF F BROADCAST flag in the flags value in struct bpf redirect info to disambiguate between a single-target and a broadcast redirect.
Recommendations: To resolve the issue, update the Linux kernel to version 6.6.37 or later, which includes the fix for the vulnerability. At the moment, there is no information about other versions that contain a fix for this vulnerability.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-10681
CVE-2024-36937
MGASA-2024-0263
MGASA-2024-0266
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6949-1
USN-6949-2
USN-6950-1
USN-6950-2
USN-6950-3
USN-6950-4
USN-6952-1
USN-6952-2
USN-6955-1
USN-6956-1
USN-6957-1
USN-7019-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu