What’s Vulnerable › Vulnerabilities
CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-04-03 · updated 2026-06-17
- Weakness: CWE-416
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.
Affected products
- Debian Linux: 10.0
- Linux kernel: from 4.10 before 4.19.308; from 4.20 before 5.4.270; from 5.5 before 5.10.211; from 5.11 before 5.15.150; from 5.16 before 6.1.80; from 6.2 before 6.6.19 — fixed in 4.19.308, 5.10.211, 5.15.150, 5.4.270, 6.1.80, 6.6.19
- NetApp 8300 Firmware: all versions
- NetApp 8700 Firmware: all versions
- NetApp A400 Firmware: all versions
- NetApp C400 Firmware: all versions
- E-Series SANtricity OS Controller Software 11.x: from 11.0.0 through 11.70.2
- NetApp H610C Firmware: all versions
- NetApp H610S Firmware: all versions
- NetApp H615C Firmware: all versions
How to fix
Upgrade to a fixed version: Linux kernel 4.19.308, 5.10.211, 5.15.150, 5.4.270. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b
- https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b
- https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6
- https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d
- https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197
- https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee
- https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa
- https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44
- https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b
- https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b
- https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6
- https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d
Get alerted when CVE-2024-26735 or the next vulnerability affects your stack