CVE-2024-36008— ipv4: check for NULL idev in ip_route_use_hint()
Affected Version Matrix 14
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 02b24941619fcce3d280311ac73b1e461552e9c8< 7da0f91681c4902bc5c210356fdd963b04d5d1d4 | affected |
02b24941619fcce3d280311ac73b1e461552e9c8< 03b5a9b2b526862b21bcc31976e393a6e63785d1 | affected | ||
02b24941619fcce3d280311ac73b1e461552e9c8< 7a25bfd12733a8f38f8ca47c581f876c3d481ac0 | affected | ||
02b24941619fcce3d280311ac73b1e461552e9c8< 8240c7308c941db4d9a0a91b54eca843c616a655 | affected | ||
02b24941619fcce3d280311ac73b1e461552e9c8< c71ea3534ec0936fc57e6fb271c7cc6a2f68c295 | affected | ||
02b24941619fcce3d280311ac73b1e461552e9c8< 58a4c9b1e5a3e53c9148e80b90e1e43897ce77d1 | affected | ||
5.5 | affected | ||
< 5.5 | unaffected | ||
| … +6 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-36008
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ipv4: check for NULL idev in ip_route_use_hint()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL idev in ip_route_use_hint() syzbot was able to trigger a NULL deref in fib_validate_source() in an old tree [1]. It appears the bug exists in latest trees. All calls to __in_dev_get_rcu() must be checked for a NULL result. [1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 2 PID: 3257 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:fib_validate_source+0xbf/0x15a0 net/ipv4/fib_frontend.c:425 Code: 18 f2 f2 f2 f2 42 c7 44 20 23 f3 f3 f3 f3 48 89 44 24 78 42 c6 44 20 27 f3 e8 5d 88 48 fc 4c 89 e8 48 c1 e8 03 48 89 44 24 18 <42> 80 3c 20 00 74 08 4c 89 ef e8 d2 15 98 fc 48 89 5c 24 10 41 bf RSP: 0018:ffffc900015fee40 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88800f7a4000 RCX: ffff88800f4f90c0 RDX: 0000000000000000 RSI: 0000000004001eac RDI: ffff8880160c64c0 RBP: ffffc900015ff060 R08: 0000000000000000 R09: ffff88800f7a4000 R10: 0000000000000002 R11: ffff88800f4f90c0 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88800f7a4000 FS: 00007f938acfe6c0(0000) GS:ffff888058c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f938acddd58 CR3: 000000001248e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip_route_use_hint+0x410/0x9b0 net/ipv4/route.c:2231 ip_rcv_finish_core+0x2c4/0x1a30 net/ipv4/ip_input.c:327 ip_list_rcv_finish net/ipv4/ip_input.c:612 [inline] ip_sublist_rcv+0x3ed/0xe50 net/ipv4/ip_input.c:638 ip_list_rcv+0x422/0x470 net/ipv4/ip_input.c:673 __netif_receive_skb_list_ptype net/core/dev.c:5572 [inline] __netif_receive_skb_list_core+0x6b1/0x890 net/core/dev.c:5620 __netif_receive_skb_list net/core/dev.c:5672 [inline] netif_receive_skb_list_internal+0x9f9/0xdc0 net/core/dev.c:5764 netif_receive_skb_list+0x55/0x3e0 net/core/dev.c:5816 xdp_recv_frames net/bpf/test_run.c:257 [inline] xdp_test_run_batch net/bpf/test_run.c:335 [inline] bpf_test_run_xdp_live+0x1818/0x1d00 net/bpf/test_run.c:363 bpf_prog_test_run_xdp+0x81f/0x1170 net/bpf/test_run.c:1376 bpf_prog_test_run+0x349/0x3c0 kernel/bpf/syscall.c:3736 __sys_bpf+0x45c/0x710 kernel/bpf/syscall.c:5115 __do_sys_bpf kernel/bpf/syscall.c:5201 [inline] __se_sys_bpf kernel/bpf/syscall.c:5199 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5199
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-36008
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36008
请登录查看更多情报信息。
Mailing List Discussions for CVE-2024-36008 (1)
Other References for CVE-2024-36008 (5)
Same Patch Batch · Linux · 2024-05-20 · 62 CVEs total
| CVE-2024-35969 | 8.8 HIGH | ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr |
| CVE-2024-35987 | 8.4 HIGH | riscv: Fix loading 64-bit NOMMU kernels past the start of RAM |
| CVE-2024-35980 | 8.4 HIGH | arm64: tlb: Fix TLBI RANGE operand |
| CVE-2024-35948 | 7.8 HIGH | bcachefs: Check for journal entries overruning end of sb clean section |
| CVE-2024-35993 | 7.8 HIGH | mm: turn folio_test_hugetlb into a PageType |
| CVE-2024-36001 | 7.8 HIGH | netfs: Fix the pre-flush when appending to a file in writethrough mode |
| CVE-2024-36007 | 7.8 HIGH | mlxsw: spectrum_acl_tcam: Fix warning during rehash |
| CVE-2024-35994 | 7.8 HIGH | firmware: qcom: uefisecapp: Fix memory related IO errors and crashes |
| CVE-2024-35990 | 7.8 HIGH | dma: xilinx_dpdma: Fix locking |
| CVE-2024-36009 | 7.8 HIGH | ax25: Fix netdev refcount issue |
| CVE-2024-35968 | 7.8 HIGH | pds_core: Fix pdsc_check_pci_health function to use work thread |
| CVE-2024-35958 | 7.8 HIGH | net: ena: Fix incorrect descriptor free behavior |
| CVE-2024-35954 | 7.8 HIGH | scsi: sg: Avoid sg device teardown race |
| CVE-2024-35951 | 7.8 HIGH | drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() |
| CVE-2024-35950 | 7.8 HIGH | drm/client: Fully protect modes[] with dev->mode_config.mutex |
| CVE-2024-35949 | 7.8 HIGH | btrfs: make sure that WRITTEN is set on all metadata blocks |
| CVE-2024-35979 | 7.8 HIGH | raid1: fix use-after-free for original bio in raid1_write_request() |
| CVE-2024-35998 | 7.5 HIGH | smb3: fix lock ordering potential deadlock in cifs_sync_mid_result |
| CVE-2024-35971 | 7.5 HIGH | net: ks8851: Handle softirqs at the end of IRQ thread to fix hang |
| CVE-2024-35999 | 7.5 HIGH | smb3: missing lock when picking channel |
Showing top 20 of 62 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
Same vendor: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. Comments for CVE-2024-36008
No comments yet