Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2024-36902: Canonical Linux kernels may crash because of IPv6 routing error
CVE-2024-36902 · published 2 years ago
Summary
The IPv6 routing part of the Linux kernel in Canonical’s cloud and LTS releases can mistakenly try to use missing information, leading to a crash. This can cause the system to stop working and require a reboot, potentially interrupting services. Install the latest kernel updates from Canonical as soon as they are released to apply the fix.
What to do
- Update canonical linux-aws to version 4.4.0-1134.140.
- Update canonical linux-azure to version 4.15.0-1179.194~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-257.291~14.04.1.
- Update canonical linux to version 4.4.0-257.291.
- Update canonical linux-aws to version 4.4.0-1172.187.
- Update canonical linux-aws-hwe to version 4.15.0-1170.183~16.04.1.
- Update canonical linux-azure to version 4.15.0-1179.194~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1164.181~16.04.1.
- Update canonical linux-hwe to version 4.15.0-227.239~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1135.145.
- Update canonical linux-oracle to version 4.15.0-1133.144~16.04.1.
- Update canonical linux-fips to version 4.4.0-1103.110.
- Update canonical linux to version 4.15.0-227.239.
- Update canonical linux-aws to version 4.15.0-1170.183.
- Update canonical linux-aws-5.4 to version 5.4.0-1130.140~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1179.194.
- Update canonical linux-azure-5.4 to version 5.4.0-1135.142~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1164.181.
- Update canonical linux-gcp-5.4 to version 5.4.0-1134.143~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-192.212~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1077.82~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1154.159.
- Update canonical linux-oracle to version 4.15.0-1133.144.
- Update canonical linux-oracle-5.4 to version 5.4.0-1129.138~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1114.126~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2109.115.
- Update canonical linux-azure-fips to version 4.15.0-2088.94.
- Update canonical linux-fips to version 4.15.0-1125.136.
- Update canonical linux-gcp-fips to version 4.15.0-2072.77.
- Update canonical linux to version 5.4.0-192.212.
- Update canonical linux-aws to version 5.4.0-1130.140.
- Update canonical linux-aws-5.15 to version 5.15.0-1067.73~20.04.1.
- Update canonical linux-azure to version 5.4.0-1135.142.
- Update canonical linux-azure-5.15 to version 5.15.0-1070.79~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1090.97.
- Update canonical linux-gcp to version 5.4.0-1134.143.
- Update canonical linux-gcp-5.15 to version 5.15.0-1066.74~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1097.101.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1050.57~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-118.128~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1077.82.
- Update canonical linux-ibm-5.15 to version 5.15.0-1060.63~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1062.68~20.04.1.
- Update canonical linux-iot to version 5.4.0-1042.43.
- Update canonical linux-kvm to version 5.4.0-1118.125.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-118.128~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1027.27~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1129.138.
- Update canonical linux-oracle-5.15 to version 5.15.0-1065.71~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1114.126.
- Update canonical linux-riscv-5.15 to version 5.15.0-1063.67~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1049.53.
- Update canonical linux-aws-fips to version 5.4.0-1130.140+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1135.142+fips1.
- Update canonical linux-fips to version 5.4.0-1104.114.
- Update canonical linux-gcp-fips to version 5.4.0-1134.143+fips1.
- Update canonical linux to version 5.15.0-118.128.
- Update canonical linux-aws to version 5.15.0-1067.73.
- Update canonical linux-aws-6.8 to version 6.8.0-1013.14~22.04.1.
- Update canonical linux-azure to version 5.15.0-1070.79.
- Update canonical linux-azure-6.8 to version 6.8.0-1012.14~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1070.79.1.
- Update canonical linux-gcp to version 5.15.0-1066.74.
- Update canonical linux-gcp-6.8 to version 6.8.0-1012.13~22.04.1.
- Update canonical linux-gke to version 5.15.0-1064.70.
- Update canonical linux-gkeop to version 5.15.0-1050.57.
- Update canonical linux-hwe-6.8 to version 6.8.0-40.40~22.04.3.
- Update canonical linux-ibm to version 5.15.0-1060.63.
- Update canonical linux-ibm-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1062.68.
- Update canonical linux-kvm to version 5.15.0-1064.69.
- Update canonical linux-lowlatency to version 5.15.0-118.128.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-40.40.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1062.63.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1011.11~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1027.27.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1015.15.
- Update canonical linux-oracle to version 5.15.0-1065.71.
- Update canonical linux-oracle-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1060.63.
- Update canonical linux-riscv-6.8 to version 6.8.0-40.40.1~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1035.39.
- Update canonical linux-bluefield to version 5.15.0-1050.52.
- Update canonical linux-aws-fips to version 5.15.0-1067.73+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1070.79+fips1.
- Update canonical linux-fips to version 5.15.0-118.128+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1066.74+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1060.62.
- Update canonical linux-realtime to version 5.15.0-1068.76.
- Update canonical linux-realtime-6.8 to version 6.8.1-1006.6~22.04.1.
- Update canonical linux to version 6.8.0-40.40.
- Update canonical linux-aws to version 6.8.0-1013.14.
- Update canonical linux-azure to version 6.8.0-1012.14.
- Update canonical linux-gcp to version 6.8.0-1012.13.
- Update canonical linux-gke to version 6.8.0-1008.11.
- Update canonical linux-ibm to version 6.8.0-1010.10.
- Update canonical linux-lowlatency to version 6.8.0-40.40.1.
- Update canonical linux-nvidia to version 6.8.0-1011.11.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1011.11.1.
- Update canonical linux-oem-6.8 to version 6.8.0-1010.10.
- Update canonical linux-oracle to version 6.8.0-1010.10.
- Update canonical linux-raspi to version 6.8.0-1009.10.
- Update canonical linux-riscv to version 6.8.0-40.40.1.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2008.8.
- Update canonical linux-realtime to version 6.8.1-1006.6.
- Update debian linux to version 6.1.94-1.
- Update debian linux to version 6.8.11-1.
- Update linux kernel to version 6.8.10.
- Update linux linux to version 4a5a573387da6a6b23a4cc62147453ff1bc32afa or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1134.140 Fix: upgrade to 4.4.0-1134.140
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1179.194~14.04.1 Fix: upgrade to 4.15.0-1179.194~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-257.291~14.04.1 Fix: upgrade to 4.4.0-257.291~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-257.291 Fix: upgrade to 4.4.0-257.291
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1172.187 Fix: upgrade to 4.4.0-1172.187
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1170.183~16.04.1 Fix: upgrade to 4.15.0-1170.183~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1179.194~16.04.1 Fix: upgrade to 4.15.0-1179.194~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1164.181~16.04.1 Fix: upgrade to 4.15.0-1164.181~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-227.239~16.04.1 Fix: upgrade to 4.15.0-227.239~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1135.145 Fix: upgrade to 4.4.0-1135.145
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1133.144~16.04.1 Fix: upgrade to 4.15.0-1133.144~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1103.110 Fix: upgrade to 4.4.0-1103.110
|
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-227.239 Fix: upgrade to 4.15.0-227.239
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1170.183 Fix: upgrade to 4.15.0-1170.183
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1130.140~18.04.1 Fix: upgrade to 5.4.0-1130.140~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1179.194 Fix: upgrade to 4.15.0-1179.194
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1135.142~18.04.1 Fix: upgrade to 5.4.0-1135.142~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1164.181 Fix: upgrade to 4.15.0-1164.181
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1134.143~18.04.1 Fix: upgrade to 5.4.0-1134.143~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-192.212~18.04.1 Fix: upgrade to 5.4.0-192.212~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1077.82~18.04.1 Fix: upgrade to 5.4.0-1077.82~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1154.159 Fix: upgrade to 4.15.0-1154.159
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1133.144 Fix: upgrade to 4.15.0-1133.144
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1129.138~18.04.1 Fix: upgrade to 5.4.0-1129.138~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1114.126~18.04.1 Fix: upgrade to 5.4.0-1114.126~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2109.115 Fix: upgrade to 4.15.0-2109.115
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2088.94 Fix: upgrade to 4.15.0-2088.94
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1125.136 Fix: upgrade to 4.15.0-1125.136
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2072.77 Fix: upgrade to 4.15.0-2072.77
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
Showing 50 of 199. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-192.212 Fix: upgrade to 5.4.0-192.212
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1130.140 Fix: upgrade to 5.4.0-1130.140
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1067.73~20.04.1 Fix: upgrade to 5.15.0-1067.73~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1135.142 Fix: upgrade to 5.4.0-1135.142
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1070.79~20.04.1 Fix: upgrade to 5.15.0-1070.79~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1090.97 Fix: upgrade to 5.4.0-1090.97
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1134.143 Fix: upgrade to 5.4.0-1134.143
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1066.74~20.04.1 Fix: upgrade to 5.15.0-1066.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1097.101 Fix: upgrade to 5.4.0-1097.101
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1050.57~20.04.1 Fix: upgrade to 5.15.0-1050.57~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-118.128~20.04.1 Fix: upgrade to 5.15.0-118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1077.82 Fix: upgrade to 5.4.0-1077.82
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1060.63~20.04.1 Fix: upgrade to 5.15.0-1060.63~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1062.68~20.04.1 Fix: upgrade to 5.15.0-1062.68~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1042.43 Fix: upgrade to 5.4.0-1042.43
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1118.125 Fix: upgrade to 5.4.0-1118.125
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-118.128~20.04.1 Fix: upgrade to 5.15.0-118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1027.27~20.04.1 Fix: upgrade to 5.15.0-1027.27~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1129.138 Fix: upgrade to 5.4.0-1129.138
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1065.71~20.04.1 Fix: upgrade to 5.15.0-1065.71~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1114.126 Fix: upgrade to 5.4.0-1114.126
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1063.67~20.04.1 Fix: upgrade to 5.15.0-1063.67~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1049.53 Fix: upgrade to 5.4.0-1049.53
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1130.140+fips1 Fix: upgrade to 5.4.0-1130.140+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1135.142+fips1 Fix: upgrade to 5.4.0-1135.142+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1104.114 Fix: upgrade to 5.4.0-1104.114
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1134.143+fips1 Fix: upgrade to 5.4.0-1134.143+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-118.128 Fix: upgrade to 5.15.0-118.128
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1067.73 Fix: upgrade to 5.15.0-1067.73
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1013.14~22.04.1 Fix: upgrade to 6.8.0-1013.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1070.79 Fix: upgrade to 5.15.0-1070.79
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1012.14~22.04.1 Fix: upgrade to 6.8.0-1012.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1070.79.1 Fix: upgrade to 5.15.0-1070.79.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1066.74 Fix: upgrade to 5.15.0-1066.74
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1012.13~22.04.1 Fix: upgrade to 6.8.0-1012.13~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1064.70 Fix: upgrade to 5.15.0-1064.70
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1050.57 Fix: upgrade to 5.15.0-1050.57
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-40.40~22.04.3 Fix: upgrade to 6.8.0-40.40~22.04.3
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1060.63 Fix: upgrade to 5.15.0-1060.63
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1062.68 Fix: upgrade to 5.15.0-1062.68
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1064.69 Fix: upgrade to 5.15.0-1064.69
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-118.128 Fix: upgrade to 5.15.0-118.128
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-40.40.1~22.04.1 Fix: upgrade to 6.8.0-40.40.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1062.63 Fix: upgrade to 5.15.0-1062.63
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1011.11~22.04.1 Fix: upgrade to 6.8.0-1011.11~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1027.27 Fix: upgrade to 5.15.0-1027.27
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1065.71 Fix: upgrade to 5.15.0-1065.71
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1060.63 Fix: upgrade to 5.15.0-1060.63
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-40.40.1~22.04.1 Fix: upgrade to 6.8.0-40.40.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1035.39 Fix: upgrade to 5.15.0-1035.39
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1050.52 Fix: upgrade to 5.15.0-1050.52
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1067.73+fips1 Fix: upgrade to 5.15.0-1067.73+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1070.79+fips1 Fix: upgrade to 5.15.0-1070.79+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-118.128+fips1 Fix: upgrade to 5.15.0-118.128+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1066.74+fips1 Fix: upgrade to 5.15.0-1066.74+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1060.62 Fix: upgrade to 5.15.0-1060.62
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1068.76 Fix: upgrade to 5.15.0-1068.76
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1006.6~22.04.1 Fix: upgrade to 6.8.1-1006.6~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-40.40 Fix: upgrade to 6.8.0-40.40
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1013.14 Fix: upgrade to 6.8.0-1013.14
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1012.14 Fix: upgrade to 6.8.0-1012.14
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1012.13 Fix: upgrade to 6.8.0-1012.13
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1008.11 Fix: upgrade to 6.8.0-1008.11
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-40.40.1 Fix: upgrade to 6.8.0-40.40.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1011.11 Fix: upgrade to 6.8.0-1011.11
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1011.11.1 Fix: upgrade to 6.8.0-1011.11.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1009.10 Fix: upgrade to 6.8.0-1009.10
|
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-40.40.1 Fix: upgrade to 6.8.0-40.40.1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2008.8 Fix: upgrade to 6.8.0-2008.8
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1006.6 Fix: upgrade to 6.8.1-1006.6
|
| Debian:12 | debian | linux |
< 6.1.94-1 Fix: upgrade to 6.1.94-1
|
| Debian:13 | debian | linux |
< 6.8.11-1 Fix: upgrade to 6.8.11-1
|
| – | linux | linux_kernel |
>= 2.6.26, < 4.19.314 >= 4.20, < 5.4.276 >= 5.5, < 5.10.217 >= 5.15, < 6.1.91 >= 6.2, < 6.6.31 >= 6.7, < 6.8.10 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< 4a5a573387da6a6b23a4cc62147453ff1bc32afa 2.6.26 |
| Linux | linux | kernel |
>= 6.7.0, < 6.8.10 Fix: upgrade to 6.8.10
|
Original advisory text
ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can return NULL, and must always be checked. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 31648 Comm: syz-executor.0 Not tainted 6.9.0-rc4-next-20240417-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__fib6_rule_action net/ipv6/fib6_rules.c:237 [inline] RIP: 0010:fib6_rule_action+0x241/0x7b0 net/ipv6/fib6_rules.c:267 Code: 02 00 00 49 8d 9f d8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f9 32 bf f7 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 e0 32 bf f7 4c 8b 03 48 89 ef 4c RSP: 0018:ffffc9000fc1f2f0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1a772f98c8186700 RDX: 0000000000000003 RSI: ffffffff8bcac4e0 RDI: ffffffff8c1f9760 RBP: ffff8880673fb980 R08: ffffffff8fac15ef R09: 1ffffffff1f582bd R10: dffffc0000000000 R11: fffffbfff1f582be R12: dffffc0000000000 R13: 0000000000000080 R14: ffff888076509000 R15: ffff88807a029a00 FS: 00007f55e82ca6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31d23000 CR3: 0000000022b66000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> fib_rules_lookup+0x62c/0xdb0 net/core/fib_rules.c:317 fib6_rule_lookup+0x1fd/0x790 net/ipv6/fib6_rules.c:108 ip6_route_output_flags_noref net/ipv6/route.c:2637 [inline] ip6_route_output_flags+0x38e/0x610 net/ipv6/route.c:2649 ip6_route_output include/net/ip6_route.h:93 [inline] ip6_dst_lookup_tail+0x189/0x11a0 net/ipv6/ip6_output.c:1120 ip6_dst_lookup_flow+0xb9/0x180 net/ipv6/ip6_output.c:1250 sctp_v6_get_dst+0x792/0x1e20 net/sctp/ipv6.c:326 sctp_transport_route+0x12c/0x2e0 net/sctp/transport.c:455 sctp_assoc_add_peer+0x614/0x15c0 net/sctp/associola.c:662 sctp_connect_new_asoc+0x31d/0x6c0 net/sctp/socket.c:1099 __sctp_connect+0x66d/0xe30 net/sctp/socket.c:1197 sctp_connect net/sctp/socket.c:4819 [inline] sctp_inet_connect+0x149/0x1f0 net/sctp/socket.c:4834 __sys_connect_file net/socket.c:2048 [inline] __sys_connect+0x2df/0x310 net/socket.c:2065 __do_sys_connect net/socket.c:2075 [inline] __se_sys_connect net/socket.c:2072 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2072 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
References
- https://ubuntu.com/security/CVE-2024-36902 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-36902 Third Party Advisory
- https://git.kernel.org/linus/d101291b2681e5ab938554e3e323f7a7ee33e3aa Third Party Advisory
- https://git.kernel.org/stable/c/4a5a573387da6a6b23a4cc62147453ff1bc32afa Third Party Advisory
- https://git.kernel.org/stable/c/674c951ab8a23f7aff9b4c3f2f865901bc76a290 Third Party Advisory
- https://git.kernel.org/stable/c/35297fc68de36826087e976f86a5b1f94fd0bf95 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6926-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6938-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6926-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6949-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6950-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6951-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6952-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6953-1 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-36902 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20240926-0002/ Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html URL
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html URL
- https://git.kernel.org/stable/c/ddec23f206a944c73bcc2724358b85388837daff Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36902... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-36902 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/7e3242c139c38e60844638e394c2877b16b396b0 Third Party Advisory
- https://git.kernel.org/stable/c/8745a8d74ba17dafe72b6ab461fa6c007d879747 Third Party Advisory
- https://git.kernel.org/stable/c/1876881c9a49613b5249fb400cbf53412d90cb09 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html URL
- https://git.kernel.org/stable/c/d101291b2681e5ab938554e3e323f7a7ee33e3aa Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html URL
- https://ubuntu.com/security/notices/USN-6926-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6955-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6956-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6957-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6950-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6950-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6949-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6952-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6951-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6951-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6950-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6951-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6979-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7019-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.8
Medium
Type
CWE-476NULL Pointer Dereference
Timeline
Published30 May 2024
Updated3 Nov 2026
First seen2 Apr 2026
Sources
UBUNTU-CVE-2024-36902 · OSV
CVE-2024-36902 · NVD
DEBIAN-CVE-2024-36902 · OSV
CVE-2024-36902 · MITRE
CVE-2024-36902 · OSV
Track software like this
Free during beta