CVE-2024-27025

nbd: null check for nla_nest_start

MEDIUM

5.5

CVSS Score

Published: May 1, 2024 at 12:49 PM UTC

Updated: October 15, 2026 at 01:17 AM UTC

3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC S7-1500 TM MFP

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL. Insert a check and set errno based on other call sites within the same source code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

4.12 ≤ v < 5.4.2735.11 ≤ v < 5.15.1535.16 ≤ v < 6.1.835.5 ≤ v < 5.10.2146.2 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.24.1247d902b90a32a42a3d33aef3a02170fc6f70aa23

Vendor states this is fixed in 31edf4bbe0ba27fd03ac7d87eb2ee3d2a231af6d (fixed)

Vendor states this is fixed in 44214d744be32a4769faebba764510888f1eb19e (fixed)

Vendor states this is fixed in 4af837db0fd3679fabc7b7758397090b0c06dced (fixed)

Vendor states this is fixed in 96436365e5d80d0106ea785a4f80a58e7c9edff8 (fixed)

Vendor states this is fixed in 98e60b538e66c90b9a856828c71d4e975ebfa797 (fixed)

Vendor states this is fixed in b7f5aed55829f376e4f7e5ea5b80ccdcb023e983 (fixed)

Vendor states this is fixed in ba6a9970ce9e284cbc04099361c58731e308596a (fixed)

Vendor states this is fixed in e803040b368d046434fbc8a91945c690332c4fcf (fixed)

Vendor states this is fixed in 4.12 (unaffected)

Vendor states this is fixed in 5.10.214 (unaffected)

Vendor states this is fixed in 5.15.153 (unaffected)

Vendor states this is fixed in 5.4.273 (unaffected)