CVE-2024-42247

wireguard: allowedips: avoid unaligned 64-bit memory accesses

State: Published
Severity: 7.5 High
Published: Aug 7, 2024
Updated: Aug 5, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wireguard: allowedips: avoid unaligned 64-bit memory accesses

On the parisc platform, the kernel issues kernel warnings because swap_endian() tries to load a 128-bit IPv6 address from an unaligned memory location:

Kernel: unaligned access to 0x55f4688c in wg_allowedips_insert_v6+0x2c/0x80 [wireguard] (iir 0xf3010df) Kernel: unaligned access to 0x55f46884 in wg_allowedips_insert_v6+0x38/0x80 [wireguard] (iir 0xf2010dc)

Avoid such unaligned memory accesses by instead using the get_unaligned_be64() helper macro.

[Jason: replace src[8] in original patch with src+8]

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e7096c131e5161fa3b8e52a650d7719d2857adfd to before ae630de24efb123d7199a43256396d7758f4cb75Affected e7096c131e5161fa3b8e52a650d7719d2857adfd to before b4764f0ad3d68de8a0b847c05f427afb86dd54e6Affected e7096c131e5161fa3b8e52a650d7719d2857adfd to before 217978a29c6ceca76d3c640bf94bdf50c268d801Affected e7096c131e5161fa3b8e52a650d7719d2857adfd to before 6638a203abad35fa636d59ac47bdbc4bc100fd74Affected e7096c131e5161fa3b8e52a650d7719d2857adfd to before 2fb34bf76431e831f9863cd59adc0bd1f67b0fbfAffected e7096c131e5161fa3b8e52a650d7719d2857adfd to before 948f991c62a4018fb81d85804eeab3029c6209f8Affected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.222 through 5.10.Not affected 5.15.163 through 5.15.Not affected 6.1.100 through 6.1.Not affected 6.6.41 through 6.6.Not affected 6.9.10 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

e7096c131e5161fa3b8e52a650d7719d2857adfd to before ae630de24efb123d7199a43256396d7758f4cb75Affected
e7096c131e5161fa3b8e52a650d7719d2857adfd to before b4764f0ad3d68de8a0b847c05f427afb86dd54e6Affected
e7096c131e5161fa3b8e52a650d7719d2857adfd to before 217978a29c6ceca76d3c640bf94bdf50c268d801Affected
e7096c131e5161fa3b8e52a650d7719d2857adfd to before 6638a203abad35fa636d59ac47bdbc4bc100fd74Affected
e7096c131e5161fa3b8e52a650d7719d2857adfd to before 2fb34bf76431e831f9863cd59adc0bd1f67b0fbfAffected
e7096c131e5161fa3b8e52a650d7719d2857adfd to before 948f991c62a4018fb81d85804eeab3029c6209f8Affected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.222 through 5.10.*Not affected
5.15.163 through 5.15.*Not affected
6.1.100 through 6.1.*Not affected
6.6.41 through 6.6.*Not affected
6.9.10 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.