CVE-2024-26735
ipv6: sr: fix possible use-after-free and null-ptr-deref
MEDIUM
5.5
CVSS Score
Published: April 3, 2024 at 05:00 PM UTC
Updated: June 17, 2026 at 07:18 AM UTC
17 products affected across 3 vendorsLinux KernelDebian LinuxE Series Santricity OS Controller
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Debian Linux· Debiandrupal
95%4.10 ≤ v < 4.19.3084.10 ≤ v < 5.10.2114.10 ≤ v < 5.15.1504.10 ≤ v < 5.4.2704.10 ≤ v < 6.1.804.10 ≤ v < 6.6.194.10 ≤ v < 6.7.74.10 ≤ v < 6.84.20 ≤ v < 5.4.2705.11 ≤ v < 5.15.1505.16 ≤ v < 6.1.805.5 ≤ v < 5.10.2116.2 ≤ v < 6.6.196.7 ≤ v < 6.7.76.8 rc16.8 rc26.8 rc36.8 rc46.8 rc5915d7e5e5930b4f01d0971d93b9b25ed17d221aa
Vendor states this is fixed in 02b08db594e8218cfbc0e4680d4331b457968a9b (fixed)
Vendor states this is fixed in 5559cea2d5aa3018a5f00dd2aca3427ba09b386b (fixed)
Vendor states this is fixed in 65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (fixed)
Vendor states this is fixed in 82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (fixed)
Vendor states this is fixed in 8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (fixed)
Vendor states this is fixed in 91b020aaa1e59bfb669d34c968e3db3d5416bcee (fixed)
Vendor states this is fixed in 953f42934533c151f440cd32390044d2396b87aa (fixed)
Vendor states this is fixed in 9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (fixed)
Vendor states this is fixed in 4.10 (unaffected)
Vendor states this is fixed in 4.19.308 (unaffected)
Vendor states this is fixed in 5.10.211 (unaffected)
Vendor states this is fixed in 5.15.150 (unaffected)
Vendor states this is fixed in 5.4.270 (unaffected)
Vendor states this is fixed in 6.1.80 (unaffected)
Vendor states this is fixed in 6.6.19 (unaffected)
Vendor states this is fixed in 6.7.7 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
11.0.0 ≤ v ≤ 11.70.2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b
- https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b
- https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6
- https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d
- https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197
References (11)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9bPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386bPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1dPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bceePatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aaPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-416CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card