NULL pointer dereference in Linux kernel core

1) NULL pointer dereference

EUVDB-ID: #VU90529

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36937

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the __xdp_do_redirect_frame(), EXPORT_SYMBOL_GPL(), xdp_do_generic_redirect_map() and xdp_do_generic_redirect() functions in net/core/filter.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 5.15 - 6.8.9

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:5.15:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc2:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc3:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc4:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc5:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc6:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15:rc7:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15.0:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.15.1:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/12481f30128fbebc2eeb55eb2d56390fdfa30c5e
https://git.kernel.org/stable/c/272bfb019f3cc018f654b992115774e77b4f3ffc
https://git.kernel.org/stable/c/e22e25820fa04ea5eaac4ef7ee200e9923f466a4
https://git.kernel.org/stable/c/6fd81f9d333e7b3532036577b1beb74ba1323553
https://git.kernel.org/stable/c/5bcf0dcbf9066348058b88a510c57f70f384c92c
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.159
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.91
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.31
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.10

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.