CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: fix missing skbuff release in seg6inputcore
The seg6input() function is responsible for adding the SRH into a packet, delegating the operation to the seg6inputcore(). This function uses the skbcowhead() to ensure that there is sufficient headroom in the skbuff for accommodating the link-layer header. In the event that the skbcowheader() function fails, the seg6inputcore() catches the error but it does not release the skbuff, which will result in a memory leak.
This issue was introduced in commit af3b5158b89d ("ipv6: sr: fix BUG due to headroom too small after SRH push") and persists even after commit 7a3f5b0de364 ("netfilter: add netfilter hooks to SRv6 data plane"), where the entire seg6input() code was refactored to deal with netfilter hooks.
The proposed patch addresses the identified memory leak by requiring the seg6inputcore() function to release the skbuff in the event that skbcowhead() fails.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39490?
CVE-2024-39490 is classified as a medium-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-39490?
To fix CVE-2024-39490, update your Linux kernel to a version that is patched, such as 6.1.123-1 or higher.
Which versions of Linux are affected by CVE-2024-39490?
CVE-2024-39490 affects Linux kernel versions up to 5.10.226-1.
Is CVE-2024-39490 related to Linux IPv6 functionality?
Yes, CVE-2024-39490 pertains to vulnerabilities in the IPv6 segment routing handling within the Linux kernel.
What can happen if CVE-2024-39490 is exploited?
Exploitation of CVE-2024-39490 could lead to resource leaks or denial of service in the affected Linux systems.