Junglewise Threat Intelligence

CVE-2024-47707: Linux Kernel NULL pointer dereference in rt6_uncached_list_flush_dev

CVE-2024-47707 · Severity: medium · CVSS 5.5 · Published 2024-10-21

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's IPv6 networking component could allow a local user to cause a system crash. This occurs during specific network interface operations, potentially leading to a denial-of-service condition. The issue affects systems running various versions of the Linux kernel and has been addressed in recent updates.

Technical details

A NULL pointer dereference vulnerability exists in the rt6_uncached_list_flush_dev() function within net/ipv6/route.c of the Linux kernel. The flaw was introduced by a previous commit that accidentally removed a necessary check for the rt6i_idev pointer. An attacker with local access can trigger this vulnerability during network device unregistration or when disabling IPv6 on an interface, leading to a general protection fault and system crash. The fix re-introduces the NULL check before accessing the device member of the rt6i_idev structure. Patches have been released for multiple stable kernel branches including 6.1, 6.6, 6.10, and 6.11.

Affected products

  • Linux Linux Kernel 6.11-rc6 and earlier versions

Timeline

  • 2024-09-13: patched: Initial fix committed to the Linux kernel tree.
  • 2024-10-21: advisory: CVE-2024-47707 published.

References

Related threats