PT-2025-3271 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2024-12-12
·
Updated
2025-10-03
·
CVE-2024-56372
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A vulnerability in the Linux kernel has been resolved, specifically in the
net: tun: fix tun napi alloc frags() function. The issue was reported by syzbot and caused a crash due to a malformed skb. The vulnerability is related to the tun napi alloc frags() function, which is used in the network stack. The estimated number of potentially affected devices is not specified.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the
tun module until a patch is available. Restrict access to the vulnerable tun interface to minimize the risk of exploitation. Avoid using the tun interface in the affected API endpoints until the issue is resolved.Exploit
Fix
DoS
NULL Pointer Dereference
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu