Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2024-36008: Linux kernel IPv4 code can crash due to missing check
CVE-2024-36008 · published 2 years ago
Summary
The Linux kernel's IPv4 networking component may try to use a missing network interface pointer, causing the system to crash. This happens in several Linux distribution kernels, including Debian and Ubuntu variants. Apply the latest kernel updates from your vendor to get the fix and avoid potential system instability.
What to do
- Update debian linux to version 6.1.90-1.
- Update debian linux to version 6.8.9-1.
- Update canonical linux-aws-5.15 to version 5.15.0-1065.71~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1068.77~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1065.73~20.04.1.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1048.55~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-116.126~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1058.61~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1060.66~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-116.126~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1027.27~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1063.69~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1061.65~20.04.1.
- Update canonical linux to version 5.15.0-116.126.
- Update canonical linux-aws to version 5.15.0-1065.71.
- Update canonical linux-aws-6.8 to version 6.8.0-1013.14~22.04.1.
- Update canonical linux-azure to version 5.15.0-1068.77.
- Update canonical linux-azure-6.8 to version 6.8.0-1012.14~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1068.77.1.
- Update canonical linux-gcp to version 5.15.0-1064.72.
- Update canonical linux-gcp-6.8 to version 6.8.0-1011.12~22.04.1.
- Update canonical linux-gke to version 5.15.0-1062.68.
- Update canonical linux-gkeop to version 5.15.0-1048.55.
- Update canonical linux-hwe-6.8 to version 6.8.0-39.39~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1058.61.
- Update canonical linux-ibm-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1060.66.
- Update canonical linux-kvm to version 5.15.0-1062.67.
- Update canonical linux-lowlatency to version 5.15.0-116.126.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-40.40.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1060.61.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1026.26.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1015.15.
- Update canonical linux-oracle to version 5.15.0-1063.69.
- Update canonical linux-oracle-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1058.61.
- Update canonical linux-riscv-6.8 to version 6.8.0-39.39.1~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1035.39.
- Update canonical linux-bluefield to version 5.15.0-1047.49.
- Update canonical linux-aws-fips to version 5.15.0-1065.71+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1068.77+fips1.
- Update canonical linux-fips to version 5.15.0-115.125+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1064.72+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1058.60.
- Update canonical linux-realtime to version 5.15.0-1066.74.
- Update canonical linux-realtime-6.8 to version 6.8.1-1005.5~22.04.2.
- Update canonical linux to version 6.8.0-39.39.
- Update canonical linux-aws to version 6.8.0-1012.13.
- Update canonical linux-azure to version 6.8.0-1012.14.
- Update canonical linux-gcp to version 6.8.0-1011.12.
- Update canonical linux-gke to version 6.8.0-1007.10.
- Update canonical linux-ibm to version 6.8.0-1009.9.
- Update canonical linux-lowlatency to version 6.8.0-39.39.1.
- Update canonical linux-nvidia to version 6.8.0-1010.10.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1011.11.1.
- Update canonical linux-oem-6.8 to version 6.8.0-1009.9.
- Update canonical linux-oracle to version 6.8.0-1010.10.
- Update canonical linux-raspi to version 6.8.0-1008.8.
- Update canonical linux-riscv to version 6.8.0-39.39.1.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2007.7.
- Update canonical linux-realtime to version 6.8.1-1005.5.
- Update linux kernel to version 6.8.9.
- Update linux linux to version 7da0f91681c4902bc5c210356fdd963b04d5d1d4 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | linux |
< 6.1.90-1 Fix: upgrade to 6.1.90-1
|
| Debian:13 | debian | linux |
< 6.8.9-1 Fix: upgrade to 6.8.9-1
|
| Debian:14 | debian | linux |
< 6.8.9-1 Fix: upgrade to 6.8.9-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1065.71~20.04.1 Fix: upgrade to 5.15.0-1065.71~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1068.77~20.04.1 Fix: upgrade to 5.15.0-1068.77~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1065.73~20.04.1 Fix: upgrade to 5.15.0-1065.73~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1048.55~20.04.1 Fix: upgrade to 5.15.0-1048.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-116.126~20.04.1 Fix: upgrade to 5.15.0-116.126~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1058.61~20.04.1 Fix: upgrade to 5.15.0-1058.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1060.66~20.04.1 Fix: upgrade to 5.15.0-1060.66~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-116.126~20.04.1 Fix: upgrade to 5.15.0-116.126~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1027.27~20.04.1 Fix: upgrade to 5.15.0-1027.27~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1063.69~20.04.1 Fix: upgrade to 5.15.0-1063.69~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1061.65~20.04.1 Fix: upgrade to 5.15.0-1061.65~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
Showing 50 of 144. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-116.126 Fix: upgrade to 5.15.0-116.126
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1065.71 Fix: upgrade to 5.15.0-1065.71
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1013.14~22.04.1 Fix: upgrade to 6.8.0-1013.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1068.77 Fix: upgrade to 5.15.0-1068.77
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1012.14~22.04.1 Fix: upgrade to 6.8.0-1012.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1068.77.1 Fix: upgrade to 5.15.0-1068.77.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1064.72 Fix: upgrade to 5.15.0-1064.72
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1011.12~22.04.1 Fix: upgrade to 6.8.0-1011.12~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1062.68 Fix: upgrade to 5.15.0-1062.68
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1048.55 Fix: upgrade to 5.15.0-1048.55
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-39.39~22.04.1 Fix: upgrade to 6.8.0-39.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1058.61 Fix: upgrade to 5.15.0-1058.61
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1060.66 Fix: upgrade to 5.15.0-1060.66
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1062.67 Fix: upgrade to 5.15.0-1062.67
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-116.126 Fix: upgrade to 5.15.0-116.126
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-40.40.1~22.04.1 Fix: upgrade to 6.8.0-40.40.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1060.61 Fix: upgrade to 5.15.0-1060.61
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1026.26 Fix: upgrade to 5.15.0-1026.26
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1063.69 Fix: upgrade to 5.15.0-1063.69
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1058.61 Fix: upgrade to 5.15.0-1058.61
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-39.39.1~22.04.1 Fix: upgrade to 6.8.0-39.39.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1035.39 Fix: upgrade to 5.15.0-1035.39
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1047.49 Fix: upgrade to 5.15.0-1047.49
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1065.71+fips1 Fix: upgrade to 5.15.0-1065.71+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1068.77+fips1 Fix: upgrade to 5.15.0-1068.77+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-115.125+fips1 Fix: upgrade to 5.15.0-115.125+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1064.72+fips1 Fix: upgrade to 5.15.0-1064.72+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1058.60 Fix: upgrade to 5.15.0-1058.60
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1066.74 Fix: upgrade to 5.15.0-1066.74
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1005.5~22.04.2 Fix: upgrade to 6.8.1-1005.5~22.04.2
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-39.39 Fix: upgrade to 6.8.0-39.39
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1012.13 Fix: upgrade to 6.8.0-1012.13
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1012.14 Fix: upgrade to 6.8.0-1012.14
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1011.12 Fix: upgrade to 6.8.0-1011.12
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1007.10 Fix: upgrade to 6.8.0-1007.10
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1009.9 Fix: upgrade to 6.8.0-1009.9
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-39.39.1 Fix: upgrade to 6.8.0-39.39.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1011.11.1 Fix: upgrade to 6.8.0-1011.11.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1009.9 Fix: upgrade to 6.8.0-1009.9
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-39.39.1 Fix: upgrade to 6.8.0-39.39.1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2007.7 Fix: upgrade to 6.8.0-2007.7
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1005.5 Fix: upgrade to 6.8.1-1005.5
|
| – | linux | linux_kernel |
>= 5.5, < 5.10.216 >= 5.11, < 5.15.158 >= 5.16, < 6.1.90 >= 6.2, < 6.6.30 >= 6.7, < 6.8.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< 7da0f91681c4902bc5c210356fdd963b04d5d1d4 5.5 |
| Linux | linux | kernel |
>= 6.7.0, < 6.8.9 Fix: upgrade to 6.8.9
|
Original advisory text
ipv4: check for NULL idev in ip_route_use_hint()
In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL idev in ip_route_use_hint() syzbot was able to trigger a NULL deref in fib_validate_source() in an old tree [1]. It appears the bug exists in latest trees. All calls to __in_dev_get_rcu() must be checked for a NULL result. [1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 2 PID: 3257 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:fib_validate_source+0xbf/0x15a0 net/ipv4/fib_frontend.c:425 Code: 18 f2 f2 f2 f2 42 c7 44 20 23 f3 f3 f3 f3 48 89 44 24 78 42 c6 44 20 27 f3 e8 5d 88 48 fc 4c 89 e8 48 c1 e8 03 48 89 44 24 18 <42> 80 3c 20 00 74 08 4c 89 ef e8 d2 15 98 fc 48 89 5c 24 10 41 bf RSP: 0018:ffffc900015fee40 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88800f7a4000 RCX: ffff88800f4f90c0 RDX: 0000000000000000 RSI: 0000000004001eac RDI: ffff8880160c64c0 RBP: ffffc900015ff060 R08: 0000000000000000 R09: ffff88800f7a4000 R10: 0000000000000002 R11: ffff88800f4f90c0 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88800f7a4000 FS: 00007f938acfe6c0(0000) GS:ffff888058c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f938acddd58 CR3: 000000001248e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip_route_use_hint+0x410/0x9b0 net/ipv4/route.c:2231 ip_rcv_finish_core+0x2c4/0x1a30 net/ipv4/ip_input.c:327 ip_list_rcv_finish net/ipv4/ip_input.c:612 [inline] ip_sublist_rcv+0x3ed/0xe50 net/ipv4/ip_input.c:638 ip_list_rcv+0x422/0x470 net/ipv4/ip_input.c:673 __netif_receive_skb_list_ptype net/core/dev.c:5572 [inline] __netif_receive_skb_list_core+0x6b1/0x890 net/core/dev.c:5620 __netif_receive_skb_list net/core/dev.c:5672 [inline] netif_receive_skb_list_internal+0x9f9/0xdc0 net/core/dev.c:5764 netif_receive_skb_list+0x55/0x3e0 net/core/dev.c:5816 xdp_recv_frames net/bpf/test_run.c:257 [inline] xdp_test_run_batch net/bpf/test_run.c:335 [inline] bpf_test_run_xdp_live+0x1818/0x1d00 net/bpf/test_run.c:363 bpf_prog_test_run_xdp+0x81f/0x1170 net/bpf/test_run.c:1376 bpf_prog_test_run+0x349/0x3c0 kernel/bpf/syscall.c:3736 __sys_bpf+0x45c/0x710 kernel/bpf/syscall.c:5115 __do_sys_bpf kernel/bpf/syscall.c:5201 [inline] __se_sys_bpf kernel/bpf/syscall.c:5199 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5199
References
- https://ubuntu.com/security/notices/USN-6898-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6898-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6917-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6919-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6921-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6921-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6927-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6952-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6952-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7019-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-36008 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-36008 Vendor Advisory
- https://git.kernel.org/stable/c/03b5a9b2b526862b21bcc31976e393a6e63785d1 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html URL
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36008... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-36008 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/7da0f91681c4902bc5c210356fdd963b04d5d1d4 Third Party Advisory
- https://git.kernel.org/stable/c/7a25bfd12733a8f38f8ca47c581f876c3d481ac0 Third Party Advisory
- https://git.kernel.org/stable/c/8240c7308c941db4d9a0a91b54eca843c616a655 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html URL
- https://git.kernel.org/stable/c/c71ea3534ec0936fc57e6fb271c7cc6a2f68c295 Third Party Advisory
- https://git.kernel.org/stable/c/58a4c9b1e5a3e53c9148e80b90e1e43897ce77d1 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-36008 Third Party Advisory
- https://git.kernel.org/linus/58a4c9b1e5a3e53c9148e80b90e1e43897ce77d1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6898-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6898-2 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.8
Medium
Type
CWE-476NULL Pointer Dereference
Timeline
Published20 May 2024
Updated2 Nov 2026
First seen1 Sep 2026
Sources
DEBIAN-CVE-2024-36008 · OSV
CVE-2024-36008 · NVD
UBUNTU-CVE-2024-36008 · OSV
CVE-2024-36008 · MITRE
CVE-2024-36008 · OSV
Track software like this
Free during beta