CVE-2024-36903: ipv6: Fix potential uninit-value access in __ip6_make_skb()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-30 · updated 2026-10-15
Weakness: CWE-908

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.

Affected products

Linux kernel: from 4.14.313 before 4.15; from 4.19.281 before 4.20; from 5.4.241 before 5.5; from 5.10.178 before 5.11; from 5.15.107 before 5.16; from 6.1.24 before 6.2 — fixed in 4.15, 4.20, 5.11, 5.16, 5.5, 6.2

How to fix

Upgrade to a fixed version: Linux kernel 4.15, 4.20, 5.11, 5.16. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-36903 or the next vulnerability affects your stack