CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint()

Q: What is the severity of CVE-2024-36008?

CVE-2024-36008 has been classified as a high severity vulnerability due to its potential for causing a NULL dereference in the Linux kernel.

Q: How do I fix CVE-2024-36008?

To fix CVE-2024-36008, update your Linux kernel to one of the patched versions, such as 5.10.223-1 or 6.12.11-1.

Q: Which Linux kernel versions are affected by CVE-2024-36008?

CVE-2024-36008 affects several versions of the Linux kernel, particularly those between 5.5 and 6.6.30.

Q: What components are impacted by CVE-2024-36008?

CVE-2024-36008 impacts the IPv4 component of the Linux kernel, specifically related to the ip_route_use_hint function.

Q: Is there a workaround for CVE-2024-36008?

There are no known effective workarounds for CVE-2024-36008 other than applying the security updates.

Published May 20, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

ipv4: check for NULL idev in iprouteusehint()

syzbot was able to trigger a NULL deref in fibvalidatesource() in an old tree [1].

It appears the bug exists in latest trees.

All calls to indevgetrcu() must be checked for a NULL result.

[1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 2 PID: 3257 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:fibvalidatesource+0xbf/0x15a0 net/ipv4/fibfrontend.c:425 Code: 18 f2 f2 f2 f2 42 c7 44 20 23 f3 f3 f3 f3 48 89 44 24 78 42 c6 44 20 27 f3 e8 5d 88 48 fc 4c 89 e8 48 c1 e8 03 48 89 44 24 18 <42> 80 3c 20 00 74 08 4c 89 ef e8 d2 15 98 fc 48 89 5c 24 10 41 bf RSP: 0018:ffffc900015fee40 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88800f7a4000 RCX: ffff88800f4f90c0 RDX: 0000000000000000 RSI: 0000000004001eac RDI: ffff8880160c64c0 RBP: ffffc900015ff060 R08: 0000000000000000 R09: ffff88800f7a4000 R10: 0000000000000002 R11: ffff88800f4f90c0 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88800f7a4000 FS: 00007f938acfe6c0(0000) GS:ffff888058c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f938acddd58 CR3: 000000001248e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: iprouteusehint+0x410/0x9b0 net/ipv4/route.c:2231 iprcvfinishcore+0x2c4/0x1a30 net/ipv4/ipinput.c:327 iplistrcvfinish net/ipv4/ipinput.c:612 [inline] ipsublistrcv+0x3ed/0xe50 net/ipv4/ipinput.c:638 iplistrcv+0x422/0x470 net/ipv4/ipinput.c:673 netifreceiveskblistptype net/core/dev.c:5572 [inline] netifreceiveskblistcore+0x6b1/0x890 net/core/dev.c:5620 netifreceiveskblist net/core/dev.c:5672 [inline] netifreceiveskblistinternal+0x9f9/0xdc0 net/core/dev.c:5764 netifreceiveskblist+0x55/0x3e0 net/core/dev.c:5816 xdprecvframes net/bpf/testrun.c:257 [inline] xdptestrunbatch net/bpf/testrun.c:335 [inline] bpftestrunxdplive+0x1818/0x1d00 net/bpf/testrun.c:363 bpfprogtestrunxdp+0x81f/0x1170 net/bpf/testrun.c:1376 bpfprogtestrun+0x349/0x3c0 kernel/bpf/syscall.c:3736 sysbpf+0x45c/0x710 kernel/bpf/syscall.c:5115 dosysbpf kernel/bpf/syscall.c:5201 [inline] sesysbpf kernel/bpf/syscall.c:5199 [inline] x64sysbpf+0x7c/0x90 kernel/bpf/syscall.c:5199

Affected Software

156 affected componentsFixes available

Linux Linux kernel>=5.5<5.10.216

Linux Linux kernel>=5.11<5.15.158

Linux Linux kernel>=5.16<6.1.90

Linux Linux kernel>=6.2<6.6.30

Linux Linux kernel>=6.7<6.8.9

Microsoft azl3 kernel 6.6.35.1-4

Patch available

Microsoft azl3 kernel 6.6.29.1-5

Patch available

Microsoft cbl2 hyperv-daemons 5.15.158.1-1

Patch available

Microsoft cbl2 hyperv-daemons 5.15.153.1-1

Patch available

Microsoft cbl2 hyperv-daemons 5.15.153.1-1

Patch available

Microsoft cbl2 kernel 5.15.158.1-1

Patch available

Microsoft cbl2 kernel 5.15.153.1-2

Patch available

Microsoft azl3 hyperv-daemons 6.6.29.1-1

Patch available

Microsoft azl3 hyperv-daemons 6.6.35.1-1

Patch available

debian/linux<6.1.90-1

6.1.90-1

debian/linux<6.8.9-1

6.8.9-1

debian/linux<6.8.9-1

6.8.9-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1065.71~20.04.1

5.15.0-1065.71~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1068.77~20.04.1

5.15.0-1068.77~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1065.73~20.04.1

5.15.0-1065.73~20.04.1

ubuntu/linux-gkeop-5.15<5.15.0-1048.55~20.04.1

5.15.0-1048.55~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-116.126~20.04.1

5.15.0-116.126~20.04.1

ubuntu/linux-ibm-5.15<5.15.0-1058.61~20.04.1

5.15.0-1058.61~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1060.66~20.04.1

5.15.0-1060.66~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-116.126~20.04.1

5.15.0-116.126~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1027.27~20.04.1

5.15.0-1027.27~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1063.69~20.04.1

5.15.0-1063.69~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1061.65~20.04.1

5.15.0-1061.65~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-116.126

5.15.0-116.126

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1065.71

5.15.0-1065.71

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1013.14~22.04.1

6.8.0-1013.14~22.04.1

ubuntu/linux-azure<5.15.0-1068.77

5.15.0-1068.77

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1012.14~22.04.1

6.8.0-1012.14~22.04.1

ubuntu/linux-azure-fde<5.15.0-1068.77.1

5.15.0-1068.77.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1064.72

5.15.0-1064.72

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1011.12~22.04.1

6.8.0-1011.12~22.04.1

ubuntu/linux-gke<5.15.0-1062.68

5.15.0-1062.68

ubuntu/linux-gkeop<5.15.0-1048.55

5.15.0-1048.55

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-39.39~22.04.1

6.8.0-39.39~22.04.1

ubuntu/linux-ibm<5.15.0-1058.61

5.15.0-1058.61

ubuntu/linux-ibm-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1060.66

5.15.0-1060.66

ubuntu/linux-kvm<5.15.0-1062.67

5.15.0-1062.67

ubuntu/linux-lowlatency<5.15.0-116.126

5.15.0-116.126

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-40.40.1~22.04.1

6.8.0-40.40.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1060.61

5.15.0-1060.61

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1026.26

5.15.0-1026.26

ubuntu/linux-nvidia-tegra-igx<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1063.69

5.15.0-1063.69

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-raspi<5.15.0-1058.61

5.15.0-1058.61

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-39.39.1~22.04.1

6.8.0-39.39.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39

5.15.0-1035.39

ubuntu/linux-bluefield<5.15.0-1047.49

5.15.0-1047.49

ubuntu/linux-intel-iot-realtime<5.15.0-1058.60

5.15.0-1058.60

ubuntu/linux-realtime<5.15.0-1066.74

5.15.0-1066.74

ubuntu/linux-realtime-6.8<6.8.1-1005.5~22.04.2

6.8.1-1005.5~22.04.2

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1065.71+fips1

5.15.0-1065.71+fips1

ubuntu/linux-azure-fips<5.15.0-1068.77+fips1

5.15.0-1068.77+fips1

ubuntu/linux-fips<5.15.0-115.125+fips1

5.15.0-115.125+fips1

ubuntu/linux-gcp-fips<5.15.0-1064.72+fips1

5.15.0-1064.72+fips1

ubuntu/linux<6.8.0-39.39

6.8.0-39.39

ubuntu/linux-aws<6.8.0-1012.13

6.8.0-1012.13

ubuntu/linux-azure<6.8.0-1012.14

6.8.0-1012.14

ubuntu/linux-gcp<6.8.0-1011.12

6.8.0-1011.12

ubuntu/linux-gke<6.8.0-1007.10

6.8.0-1007.10

ubuntu/linux-ibm<6.8.0-1009.9

6.8.0-1009.9

ubuntu/linux-lowlatency<6.8.0-39.39.1

6.8.0-39.39.1

ubuntu/linux-nvidia<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-nvidia-lowlatency<6.8.0-1011.11.1

6.8.0-1011.11.1

ubuntu/linux-oem-6.8<6.8.0-1009.9

6.8.0-1009.9

ubuntu/linux-oracle<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-raspi<6.8.0-1008.8

6.8.0-1008.8

ubuntu/linux-riscv<6.8.0-39.39.1

6.8.0-39.39.1

ubuntu/linux-raspi-realtime<6.8.0-2007.7

6.8.0-2007.7

ubuntu/linux-realtime<6.8.1-1005.5

6.8.1-1005.5

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.90-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.8.9-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.73~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.55~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.61~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.66~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.69~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1061.65~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.72
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.12~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.68
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.55
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-39.39~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.61
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.66
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.67
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.61
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.26
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.69
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.61
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-39.39.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.39
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1047.49
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.60
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1005.5~22.04.2
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-115.125+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.72+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-39.39
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.13
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.14
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.12
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1007.10
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1009.9
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-39.39.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1009.9
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.8
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-39.39.1
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2007.7
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1005.5
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1

Event History

May 20, 2024

CVE Published

via MITRE·09:48 AM

Data Sourced

via MITRE·09:48 AM

Description

Data Sourced

via OSV·10:15 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·10:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

May 23, 2024

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·07:00 AM

Affected Software

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-3842-1

Frequently Asked Questions

What is the severity of CVE-2024-36008?

CVE-2024-36008 has been classified as a high severity vulnerability due to its potential for causing a NULL dereference in the Linux kernel.

How do I fix CVE-2024-36008?

To fix CVE-2024-36008, update your Linux kernel to one of the patched versions, such as 5.10.223-1 or 6.12.11-1.

Which Linux kernel versions are affected by CVE-2024-36008?

CVE-2024-36008 affects several versions of the Linux kernel, particularly those between 5.5 and 6.6.30.

What components are impacted by CVE-2024-36008?

CVE-2024-36008 impacts the IPv4 component of the Linux kernel, specifically related to the ip_route_use_hint function.

Is there a workaround for CVE-2024-36008?

There are no known effective workarounds for CVE-2024-36008 other than applying the security updates.

CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint()

Affected Software

Remediation

Event History

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-36008?

How do I fix CVE-2024-36008?

Which Linux kernel versions are affected by CVE-2024-36008?

What components are impacted by CVE-2024-36008?

Is there a workaround for CVE-2024-36008?

Company

Resources

Contact