CVE-2024-26634: net: fix removing a namespace with conflicting altnames
In the Linux kernel, the following vulnerability has been resolved:
net: fix removing a namespace with conflicting altnames
Mark reports a BUG() when a net namespace is removed.
kernel BUG at net/core/dev.c:11520!
Physical interfaces moved outside of initnet get "refunded" to initnet when that namespace disappears. The main interface name may get overwritten in the process if it would have conflicted. We need to also discard all conflicting altnames. Recent fixes addressed ensuring that altnames get moved with the main interface, which surfaced this problem.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26634?
CVE-2024-26634 is classified with a medium severity due to potential disruption in network namespace operations.
Which versions are affected by CVE-2024-26634?
CVE-2024-26634 affects Linux kernel versions prior to 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, and 6.12.12-1.
How do I fix CVE-2024-26634?
To remediate CVE-2024-26634, upgrade to one of the fixed kernel versions: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
What systems are impacted by CVE-2024-26634?
CVE-2024-26634 impacts systems using the affected versions of the Linux kernel that rely on network namespace functionalities.
Is there any workaround for CVE-2024-26634?
There is no known workaround for CVE-2024-26634, so updating the kernel is essential for mitigation.