What’s Vulnerable › Vulnerabilities

CVE-2024-42154: tcp_metrics: validate source addr length

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-30 · updated 2026-10-15
• Weakness: CWE-754

Description

In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).

Affected products

• Linux kernel: from 3.14 before 4.19.318; from 4.20 before 5.4.280; from 5.5 before 5.10.222; from 5.11 before 5.15.163; from 5.16 before 6.1.98; from 6.2 before 6.6.39 — fixed in 4.19.318, 5.10.222, 5.15.163, 5.4.280, 6.1.98, 6.6.39

How to fix

Upgrade to a fixed version: Linux kernel 4.19.318, 5.10.222, 5.15.163, 5.4.280. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9
• https://git.kernel.org/stable/c/2a2e79dbe2236a1289412d2044994f7ab419b44c
• https://git.kernel.org/stable/c/31f03bb04146c1c6df6c03e9f45401f5f5a985d3
• https://git.kernel.org/stable/c/3d550dd5418729a6e77fe7721d27adea7152e321
• https://git.kernel.org/stable/c/66be40e622e177316ae81717aa30057ba9e61dff
• https://git.kernel.org/stable/c/8c2debdd170e395934ac0e039748576dfde14e99
• https://git.kernel.org/stable/c/cdffc358717e436bb67122bb82c1a2a26e050f98
• https://git.kernel.org/stable/c/ef7c428b425beeb52b894e16f1c4b629d6cebfb6
• http://www.openwall.com/lists/oss-security/2024/09/24/3
• http://www.openwall.com/lists/oss-security/2024/09/24/4
• http://www.openwall.com/lists/oss-security/2024/09/25/3
• https://git.kernel.org/stable/c/19d997b59fa1fd7a02e770ee0881c0652b9c32c9

Get alerted when CVE-2024-42154 or the next vulnerability affects your stack