Riskcovery

CVE-2024-27417

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

It seems that if userspace provides a correct IFA_TARGET_NETNSID value but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr() returns -EINVAL with an elevated "struct net" refcount.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 9d4ffb5b9d879a75e4f7460e8b10e756b4dfb132Affected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 810fa7d5e5202fcfb22720304b755f1bdfd4c174Affected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 8a54834c03c30e549c33d5da0975f3e1454ec906Affected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 1b0998fdd85776775d975d0024bca227597e836aAffected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 44112bc5c74e64f28f5a9127dc34066c7a09bd0fAffected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 33a1b6bfef6def2068c8703403759024ce17053eAffected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to before 10bfd453da64a057bcfd1a49fb6b271c48653cdbAffected
LinuxLinux
  • 4.20Affected
  • before 4.20Not affected
  • 5.4.271 through 5.4.*Not affected
  • 5.10.212 through 5.10.*Not affected
  • 5.15.151 through 5.15.*Not affected
  • 6.1.81 through 6.1.*Not affected
  • 6.6.21 through 6.6.*Not affected
  • 6.7.9 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.