CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output()

Published May 30, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ipv6: prevent NULL dereference in ip6output()

According to syzbot, there is a chance that ip6dstidev() returns NULL in ip6output(). Most places in IPv6 stack deal with a NULL idev just fine, but not here.

syzbot reported:

general protection fault, probably for non-canonical address 0xdffffc00000000bc: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000005e0-0x00000000000005e7] CPU: 0 PID: 9775 Comm: syz-executor.4 Not tainted 6.9.0-rc5-syzkaller-00157-g6a30653b604a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:ip6output+0x231/0x3f0 net/ipv6/ip6output.c:237 Code: 3c 1e 00 49 89 df 74 08 4c 89 ef e8 19 58 db f7 48 8b 44 24 20 49 89 45 00 49 89 c5 48 8d 9d e0 05 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 4c 8b 74 24 28 0f 85 61 01 00 00 8b 1b 31 ff RSP: 0018:ffffc9000927f0d8 EFLAGS: 00010202 RAX: 00000000000000bc RBX: 00000000000005e0 RCX: 0000000000040000 RDX: ffffc900131f9000 RSI: 0000000000004f47 RDI: 0000000000004f48 RBP: 0000000000000000 R08: ffffffff8a1f0b9a R09: 1ffffffff1f51fad R10: dffffc0000000000 R11: fffffbfff1f51fae R12: ffff8880293ec8c0 R13: ffff88805d7fc000 R14: 1ffff1100527d91a R15: dffffc0000000000 FS: 00007f135c6856c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000080 CR3: 0000000064096000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> NFHOOK include/linux/netfilter.h:314 [inline] ip6xmit+0xefe/0x17f0 net/ipv6/ip6output.c:358 sctpv6xmit+0x9f2/0x13f0 net/sctp/ipv6.c:248 sctppackettransmit+0x26ad/0x2ca0 net/sctp/output.c:653 sctppacketsingleton+0x22c/0x320 net/sctp/outqueue.c:783 sctpoutqflushctrl net/sctp/outqueue.c:914 [inline] sctpoutqflush+0x6d5/0x3e20 net/sctp/outqueue.c:1212 sctpsideeffects net/sctp/smsideeffect.c:1198 [inline] sctpdosm+0x59cc/0x60c0 net/sctp/smsideeffect.c:1169 sctpprimitiveASSOCIATE+0x95/0xc0 net/sctp/primitive.c:73 sctpconnect+0x9cd/0xe30 net/sctp/socket.c:1234 sctpconnect net/sctp/socket.c:4819 [inline] sctpinetconnect+0x149/0x1f0 net/sctp/socket.c:4834 sysconnectfile net/socket.c:2048 [inline] sysconnect+0x2df/0x310 net/socket.c:2065 dosysconnect net/socket.c:2075 [inline] sesysconnect net/socket.c:2072 [inline] x64sysconnect+0x7a/0x90 net/socket.c:2072 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xf5/0x240 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x77/0x7f

Other sources

In the Linux kernel, the following vulnerability has been resolved:

ipv6: prevent NULL dereference in ip6output()

The Linux kernel CVE team has assigned CVE-2024-36901 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053035-CVE-2024-36901-fb16@gregkh/T

— Red Hat

Affected Software

211 affected componentsFixes available
Linux Linux kernel>=2.6.27<6.1.91
Linux Linux kernel>=6.2<6.6.31
Linux Linux kernel>=6.7<6.8.10
Microsoft azl3 kernel 6.6.35.1-4
Patch available
Microsoft azl3 kernel 6.6.29.1-5
Patch available
Microsoft cbl2 kernel 5.15.180.1-1
Patch available
Microsoft cbl2 kernel 5.15.180.1-1
Patch available
Microsoft cbl2 kernel 5.15.164.1-1
Patch available
redhat/kernel<6.1.91
6.1.91
redhat/kernel<6.6.31
6.6.31
redhat/kernel<6.8.10
6.8.10
redhat/kernel<6.9
6.9
debian/linux<6.1.94-1
6.1.94-1
debian/linux<6.8.11-1
6.8.11-1
debian/linux<6.8.11-1
6.8.11-1
ubuntu/linux-aws<4.4.0-1135.141
4.4.0-1135.141
ubuntu/linux-azure<4.15.0-1180.195~14.04.1
4.15.0-1180.195~14.04.1
ubuntu/linux-lts-xenial<4.4.0-258.292~14.04.2
4.4.0-258.292~14.04.2
ubuntu/linux*
ubuntu/linux<4.4.0-258.292
4.4.0-258.292
ubuntu/linux-aws<4.4.0-1173.188
4.4.0-1173.188
ubuntu/linux-aws-hwe<4.15.0-1172.185~16.04.1
4.15.0-1172.185~16.04.1
ubuntu/linux-azure<4.15.0-1180.195~16.04.1
4.15.0-1180.195~16.04.1
ubuntu/linux-gcp<4.15.0-1165.182~16.04.1
4.15.0-1165.182~16.04.1
ubuntu/linux-hwe<4.15.0-228.240~16.04.1
4.15.0-228.240~16.04.1
ubuntu/linux-kvm<4.4.0-1136.146
4.4.0-1136.146
ubuntu/linux-oracle<4.15.0-1134.145~16.04.1
4.15.0-1134.145~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1104.111
4.4.0-1104.111
ubuntu/linux-fips*
ubuntu/linux<4.15.0-228.240
4.15.0-228.240
ubuntu/linux-aws<4.15.0-1172.185
4.15.0-1172.185
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4<5.4.0-1131.141~18.04.1
5.4.0-1131.141~18.04.1
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1180.195
4.15.0-1180.195
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1136.143~18.04.1
5.4.0-1136.143~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1165.182
4.15.0-1165.182
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1135.144~18.04.1
5.4.0-1135.144~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-193.213~18.04.1
5.4.0-193.213~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1078.83~18.04.1
5.4.0-1078.83~18.04.1
ubuntu/linux-kvm<4.15.0-1155.160
4.15.0-1155.160
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1134.145
4.15.0-1134.145
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1130.139~18.04.1
5.4.0-1130.139~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1115.127~18.04.1
5.4.0-1115.127~18.04.1
ubuntu/linux-aws-fips<4.15.0-2110.116
4.15.0-2110.116
ubuntu/linux-azure-fips<4.15.0-2089.95
4.15.0-2089.95
ubuntu/linux-fips<4.15.0-1126.137
4.15.0-1126.137
ubuntu/linux-gcp-fips<4.15.0-2073.78
4.15.0-2073.78
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-193.213
5.4.0-193.213
ubuntu/linux-aws<5.4.0-1131.141
5.4.0-1131.141
ubuntu/linux-aws-5.15<5.15.0-1068.74~20.04.1
5.15.0-1068.74~20.04.1
ubuntu/linux-azure<5.4.0-1136.143
5.4.0-1136.143
ubuntu/linux-azure-5.15<5.15.0-1071.80~20.04.1
5.15.0-1071.80~20.04.1
ubuntu/linux-bluefield<5.4.0-1091.98
5.4.0-1091.98
ubuntu/linux-gcp<5.4.0-1135.144
5.4.0-1135.144
ubuntu/linux-gcp-5.15<5.15.0-1067.75~20.04.1
5.15.0-1067.75~20.04.1
ubuntu/linux-gkeop<5.4.0-1098.102
5.4.0-1098.102
ubuntu/linux-gkeop-5.15<5.15.0-1051.58~20.04.1
5.15.0-1051.58~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-119.129~20.04.1
5.15.0-119.129~20.04.1
ubuntu/linux-ibm<5.4.0-1078.83
5.4.0-1078.83
ubuntu/linux-ibm-5.15<5.15.0-1061.64~20.04.1
5.15.0-1061.64~20.04.1
ubuntu/linux-intel-iotg-5.15<5.15.0-1063.69~20.04.1
5.15.0-1063.69~20.04.1
ubuntu/linux-iot<5.4.0-1043.44
5.4.0-1043.44
ubuntu/linux-kvm<5.4.0-1119.127
5.4.0-1119.127
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-119.129~20.04.1
5.15.0-119.129~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1030.30~20.04.1
5.15.0-1030.30~20.04.1
ubuntu/linux-oracle<5.4.0-1130.139
5.4.0-1130.139
ubuntu/linux-oracle-5.15<5.15.0-1066.72~20.04.1
5.15.0-1066.72~20.04.1
ubuntu/linux-raspi<5.4.0-1115.127
5.4.0-1115.127
ubuntu/linux-riscv-5.15<5.15.0-1064.68~20.04.1
5.15.0-1064.68~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1050.54
5.4.0-1050.54
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1131.141+fips1
5.4.0-1131.141+fips1
ubuntu/linux-azure-fips<5.4.0-1136.143+fips1
5.4.0-1136.143+fips1
ubuntu/linux-fips<5.4.0-1105.115
5.4.0-1105.115
ubuntu/linux-gcp-fips<5.4.0-1135.144+fips1
5.4.0-1135.144+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-119.129
5.15.0-119.129
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1068.74
5.15.0-1068.74
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2*
ubuntu/linux-aws-6.5*
ubuntu/linux-aws-6.8<6.8.0-1013.14~22.04.1
6.8.0-1013.14~22.04.1
ubuntu/linux-azure<5.15.0-1071.80
5.15.0-1071.80
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2*
ubuntu/linux-azure-6.5*
ubuntu/linux-azure-6.8<6.8.0-1012.14~22.04.1
6.8.0-1012.14~22.04.1
ubuntu/linux-azure-fde<5.15.0-1071.80.1
5.15.0-1071.80.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-azure-fde-6.2*
ubuntu/linux-gcp<5.15.0-1067.75
5.15.0-1067.75
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2*
ubuntu/linux-gcp-6.5*
ubuntu/linux-gcp-6.8<6.8.0-1012.13~22.04.1
6.8.0-1012.13~22.04.1
ubuntu/linux-gke<5.15.0-1065.71
5.15.0-1065.71
ubuntu/linux-gkeop<5.15.0-1051.58
5.15.0-1051.58
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2*
ubuntu/linux-hwe-6.5*
ubuntu/linux-hwe-6.8<6.8.0-40.40~22.04.3
6.8.0-40.40~22.04.3
ubuntu/linux-ibm<5.15.0-1061.64
5.15.0-1061.64
ubuntu/linux-ibm-6.8<6.8.0-1010.10~22.04.1
6.8.0-1010.10~22.04.1
ubuntu/linux-intel-iotg<5.15.0-1063.69
5.15.0-1063.69
ubuntu/linux-kvm<5.15.0-1065.70
5.15.0-1065.70
ubuntu/linux-lowlatency<5.15.0-119.129
5.15.0-119.129
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2*
ubuntu/linux-lowlatency-hwe-6.5*
ubuntu/linux-lowlatency-hwe-6.8<6.8.0-40.40.1~22.04.1
6.8.0-40.40.1~22.04.1
ubuntu/linux-nvidia<5.15.0-1063.64
5.15.0-1063.64
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-6.5*
ubuntu/linux-nvidia-6.8<6.8.0-1011.11~22.04.1
6.8.0-1011.11~22.04.1
ubuntu/linux-nvidia-tegra<5.15.0-1028.28
5.15.0-1028.28
ubuntu/linux-nvidia-tegra-igx<5.15.0-1016.16
5.15.0-1016.16
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oem-6.1*
ubuntu/linux-oem-6.5*
ubuntu/linux-oracle<5.15.0-1066.72
5.15.0-1066.72
ubuntu/linux-oracle-6.5*
ubuntu/linux-oracle-6.8<6.8.0-1010.10~22.04.1
6.8.0-1010.10~22.04.1
ubuntu/linux-raspi<5.15.0-1061.64
5.15.0-1061.64
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-riscv-6.5*
ubuntu/linux-riscv-6.8<6.8.0-40.40.1~22.04.1
6.8.0-40.40.1~22.04.1
ubuntu/linux-starfive-5.19*
ubuntu/linux-starfive-6.2*
ubuntu/linux-starfive-6.5*
ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39
5.15.0-1035.39
ubuntu/linux-bluefield<5.15.0-1051.53
5.15.0-1051.53
ubuntu/linux-intel-iot-realtime<5.15.0-1061.63
5.15.0-1061.63
ubuntu/linux-realtime<5.15.0-1069.77
5.15.0-1069.77
ubuntu/linux-realtime-6.8<6.8.1-1006.6~22.04.1
6.8.1-1006.6~22.04.1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips<5.15.0-1068.74+fips1
5.15.0-1068.74+fips1
ubuntu/linux-azure-fips<5.15.0-1071.80+fips1
5.15.0-1071.80+fips1
ubuntu/linux-fips<5.15.0-119.129+fips1
5.15.0-119.129+fips1
ubuntu/linux-gcp-fips<5.15.0-1067.75+fips1
5.15.0-1067.75+fips1
ubuntu/linux<6.8.0-40.40
6.8.0-40.40
ubuntu/linux-aws<6.8.0-1013.14
6.8.0-1013.14
ubuntu/linux-azure<6.8.0-1012.14
6.8.0-1012.14
ubuntu/linux-gcp<6.8.0-1012.13
6.8.0-1012.13
ubuntu/linux-gke<6.8.0-1008.11
6.8.0-1008.11
ubuntu/linux-ibm<6.8.0-1010.10
6.8.0-1010.10
ubuntu/linux-lowlatency<6.8.0-40.40.1
6.8.0-40.40.1
ubuntu/linux-nvidia<6.8.0-1011.11
6.8.0-1011.11
ubuntu/linux-nvidia-lowlatency<6.8.0-1011.11.1
6.8.0-1011.11.1
ubuntu/linux-oem-6.8<6.8.0-1010.10
6.8.0-1010.10
ubuntu/linux-oracle<6.8.0-1010.10
6.8.0-1010.10
ubuntu/linux-raspi<6.8.0-1009.10
6.8.0-1009.10
ubuntu/linux-riscv<6.8.0-40.40.1
6.8.0-40.40.1
ubuntu/linux-raspi-realtime<6.8.0-2008.8
6.8.0-2008.8
ubuntu/linux-realtime<6.8.1-1006.6
6.8.1-1006.6
ubuntu/linux-fips<6.8.0-78.78+fips1
6.8.0-78.78+fips1
ubuntu/linux-vmware*
debian/linux
6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.1.91
  2. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.6.31
  3. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.8.10
  4. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.9
  5. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.94-1
  6. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.8.11-1
  7. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1135.141
  8. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.195~14.04.1
  9. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-258.292~14.04.2
  10. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-258.292
  11. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1173.188
  12. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1172.185~16.04.1
  13. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.195~16.04.1
  14. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1165.182~16.04.1
  15. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-228.240~16.04.1
  16. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1136.146
  17. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1134.145~16.04.1
  18. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1104.111
  19. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-228.240
  20. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1172.185
  21. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1131.141~18.04.1
  22. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.195
  23. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1136.143~18.04.1
  24. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1165.182
  25. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.144~18.04.1
  26. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-193.213~18.04.1
  27. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1078.83~18.04.1
  28. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1155.160
  29. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1134.145
  30. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1130.139~18.04.1
  31. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1115.127~18.04.1
  32. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2110.116
  33. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2089.95
  34. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1126.137
  35. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2073.78
  36. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-193.213
  37. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1131.141
  38. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.74~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1136.143
  40. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.80~20.04.1
  41. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1091.98
  42. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.144
  43. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.75~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1098.102
  45. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1051.58~20.04.1
  46. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-119.129~20.04.1
  47. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1078.83
  48. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1061.64~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1063.69~20.04.1
  50. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1043.44
  51. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1119.127
  52. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-119.129~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.30~20.04.1
  54. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1130.139
  55. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1066.72~20.04.1
  56. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1115.127
  57. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1064.68~20.04.1
  58. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1050.54
  59. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1131.141+fips1
  60. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1136.143+fips1
  61. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1105.115
  62. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.144+fips1
  63. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-119.129
  64. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.74
  65. Upgrade

    Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1013.14~22.04.1
  66. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.80
  67. Upgrade

    Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.14~22.04.1
  68. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.80.1
  69. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.75
  70. Upgrade

    Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.13~22.04.1
  71. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.71
  72. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1051.58
  73. Upgrade

    Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-40.40~22.04.3
  74. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1061.64
  75. Upgrade

    Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1010.10~22.04.1
  76. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1063.69
  77. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.70
  78. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-119.129
  79. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-40.40.1~22.04.1
  80. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1063.64
  81. Upgrade

    Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1011.11~22.04.1
  82. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.28
  83. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1016.16
  84. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1066.72
  85. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1010.10~22.04.1
  86. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1061.64
  87. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-40.40.1~22.04.1
  88. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1035.39
  89. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1051.53
  90. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1061.63
  91. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.77
  92. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1006.6~22.04.1
  93. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.74+fips1
  94. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.80+fips1
  95. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-119.129+fips1
  96. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.75+fips1
  97. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-40.40
  98. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1013.14
  99. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.14
  100. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.13
  101. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1008.11
  102. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 6.8.0-1010.10
  103. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-40.40.1
  104. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1011.11
  105. Upgrade

    Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-1011.11.1
  106. Upgrade

    Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1010.10
  107. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 6.8.0-1010.10
  108. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 6.8.0-1009.10
  109. Upgrade

    Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.

    Fixed in 6.8.0-40.40.1
  110. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2008.8
  111. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.1-1006.6
  112. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-78.78+fips1
  113. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1

Event History

May 30, 2024
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
Description
Data Sourced
via OSV·04:15 PM
DescriptionSeverityAffected Software
Jun 3, 2024
Data Sourced
via Red Hat·05:23 PM
DescriptionSeverityAffected Software
Aug 16, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2024-36901?

CVE-2024-36901 has a high severity due to the potential for a NULL dereference in the ip6_output() function of the Linux kernel.

2

How do I fix CVE-2024-36901?

To fix CVE-2024-36901, update the Linux kernel to versions 6.1.91, 6.6.31, 6.8.10, or 6.9, as well as specific Debian versions.

3

Which Linux kernel versions are affected by CVE-2024-36901?

CVE-2024-36901 affects Linux kernel versions prior to 6.1.91, 6.6.31, 6.8.10, and 6.9.

4

Is there a known exploit for CVE-2024-36901?

As of now, there are no publicly known exploits for CVE-2024-36901, but it is recommended to patch the vulnerability to prevent potential attacks.

5

What impacts does CVE-2024-36901 have on system security?

CVE-2024-36901 can lead to instability or crashes in systems using the affected versions of the Linux kernel, resulting in potential denial of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203