Riskcovery

CVE-2024-26634

net: fix removing a namespace with conflicting altnames

State
Published
Severity
Not scored
Published
Mar 18, 2024
Updated
May 23, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: fix removing a namespace with conflicting altnames

Mark reports a BUG() when a net namespace is removed.

kernel BUG at net/core/dev.c:11520!

Physical interfaces moved outside of init_net get "refunded" to init_net when that namespace disappears. The main interface name may get overwritten in the process if it would have conflicted. We need to also discard all conflicting altnames. Recent fixes addressed ensuring that altnames get moved with the main interface, which surfaced this problem.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 673edcffa0960fc154085d639e10f80b6317d3bd to before a2232f29bf52c24f827865b3c90829c44b6c695bAffected
  • 7663d522099ecc464512164e660bc771b2ff7b64 to before e855dded4b70d1975ee7b9fed0c700391e3c8ea6Affected
  • 7663d522099ecc464512164e660bc771b2ff7b64 to before 8072699aa9e67d1727692cfb3c347263bb627fb9Affected
  • 7663d522099ecc464512164e660bc771b2ff7b64 to before d09486a04f5da0a812c26217213b89a3b1acf836Affected
  • f7a69786fe5ec75d1cdd71b465e74a1adc68ef40Affected
  • 6.1.60 to before 6.1.76Affected
  • 6.5.9 to before 6.6Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.1.76 through 6.1.*Not affected
  • 6.6.15 through 6.6.*Not affected
  • 6.7.3 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.