Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.10, < 4.19.308 |
| Debian | Debian Linux | 10.0 |
| Netapp | 8300 Firmware | - |
| Netapp | 8300 | All versions |
| Netapp | 8700 Firmware | - |
| Netapp | 8700 | All versions |
| Netapp | A400 Firmware | - |
| Netapp | A400 | All versions |
| Netapp | C400 Firmware | - |
| Netapp | C400 | All versions |
| Netapp | H610C Firmware | - |
| Netapp | H610C | All versions |
| Netapp | H610S Firmware | - |
| Netapp | H610S | All versions |
| Netapp | H615C Firmware | - |
| Netapp | H615C | All versions |
| Netapp | E-Series Santricity Os Controller | >= 11.0.0, <= 11.70.2 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9bPatch
- https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386bPatch
- https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6Patch
- https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1dPatch
- https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197Patch
- https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bceePatch
- https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aaPatch
- https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44Patch
- https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9bPatch
- https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386bPatch
- https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6Patch
- https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1dPatch
- https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197Patch
- https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bceePatch
- https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aaPatch
FAQ
What is CVE-2024-26735?
CVE-2024-26735 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered befo...
How severe is CVE-2024-26735?
CVE-2024-26735 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-26735?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux, Netapp 8300 Firmware, Netapp 8300, Netapp 8700 Firmware.