In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can return NULL, and must always be checked. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1876881c9a49613b5249fb400cbf53412d90cb09 Patch
- https://git.kernel.org/stable/c/35297fc68de36826087e976f86a5b1f94fd0bf95 Patch
- https://git.kernel.org/stable/c/4a5a573387da6a6b23a4cc62147453ff1bc32afa Patch
- https://git.kernel.org/stable/c/674c951ab8a23f7aff9b4c3f2f865901bc76a290 Patch
- https://git.kernel.org/stable/c/7e3242c139c38e60844638e394c2877b16b396b0 Patch
- https://git.kernel.org/stable/c/8745a8d74ba17dafe72b6ab461fa6c007d879747 Patch
- https://git.kernel.org/stable/c/d101291b2681e5ab938554e3e323f7a7ee33e3aa Patch
- https://git.kernel.org/stable/c/ddec23f206a944c73bcc2724358b85388837daff Patch
- https://git.kernel.org/stable/c/1876881c9a49613b5249fb400cbf53412d90cb09 Patch
- https://git.kernel.org/stable/c/35297fc68de36826087e976f86a5b1f94fd0bf95 Patch
- https://git.kernel.org/stable/c/4a5a573387da6a6b23a4cc62147453ff1bc32afa Patch
- https://git.kernel.org/stable/c/674c951ab8a23f7aff9b4c3f2f865901bc76a290 Patch
- https://git.kernel.org/stable/c/7e3242c139c38e60844638e394c2877b16b396b0 Patch
- https://git.kernel.org/stable/c/8745a8d74ba17dafe72b6ab461fa6c007d879747 Patch
- https://git.kernel.org/stable/c/d101291b2681e5ab938554e3e323f7a7ee33e3aa Patch
- https://git.kernel.org/stable/c/ddec23f206a944c73bcc2724358b85388837daff Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://security.netapp.com/advisory/ntap-20240926-0002/
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
Timeline
- nvd_ingest NVD