PT-2024-9061 · Linux+9 · Linux Kernel+9
Antonin Bas
·
Published
2024-05-10
·
Updated
2025-10-20
·
CVE-2024-38558
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the openvswitch component in the Linux kernel, where the
OVS PACKET CMD EXECUTE path has a vulnerability that can lead to incorrect packet matching and potentially executing wrong actions. This occurs when parsing ICMPv6 headers, specifically with the ipv6.nd field, which is a union that shares space between nd and ct orig and holds the original tuple conntrack metadata. The problem arises when the packet parsing code zeroes out fields in the key corresponding to Neighbor Discovery information, even if it's not an ND packet. This can result in all but the last 4 bytes of the destination address being wiped from the original conntrack tuple. The issue only affects the OVS PACKET CMD EXECUTE path and does not affect packets entering the OVS datapath from network interfaces.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
RCE
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu