Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-46677— gtp: fix a potential NULL pointer dereference

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在代码问题漏洞，该漏洞源于在sockfd_lookup函数失败时未能正确处理返回的空指针，导致空指针取消引用。

AI Predicted 4.4 Difficulty: Moderate EPSS 0.26% · P17

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< 620fe9809752fae91b4190e897b81ed9976dfb39 affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< 8bbb9e4e0e66a39282e582d0440724055404b38c affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< 4643b91691e969b1b9ad54bf552d7a990cfa3b87 affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< e8b9930b0eb045d19e883c65ff9676fc89320c70 affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< 28c67f0f84f889fe9f4cbda8354132b20dc9212d affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< 612edd35f2a3910ab1f61c1f2338889d4ba99fa2 affected
1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9< defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-46677

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
gtp: fix a potential NULL pointer dereference
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.)
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在代码问题漏洞，该漏洞源于在sockfd_lookup函数失败时未能正确处理返回的空指针，导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 ~ 620fe9809752fae91b4190e897b81ed9976dfb39 -
Linux Linux 4.12 -

II. Public POCs for CVE-2024-46677

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-46677

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-46677 (6)

Same Patch Batch · Linux · 2024-09-13 · 40 CVEs total

CVE-2024-46697 9.8 CRITICAL nfsd: ensure that nfsd4_fattr_args.context is zeroed out
CVE-2024-46695 9.8 CRITICAL selinux,smack: don't bypass permissions check in inode_setsecctx hook
CVE-2024-46696 9.8 CRITICAL nfsd: fix potential UAF in nfsd4_cb_getattr_release
CVE-2024-46690 9.8 CRITICAL nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease
CVE-2024-46673 7.8 HIGH scsi: aacraid: Fix double-free on probe failure
CVE-2024-46713 7.8 HIGH perf/aux: Fix AUX buffer serialization
CVE-2024-46710 7.8 HIGH drm/vmwgfx: Prevent unmapping active read buffers
CVE-2024-46709 7.8 HIGH drm/vmwgfx: Fix prime with external buffers
CVE-2024-46705 7.8 HIGH drm/xe: reset mmio mappings with devm
CVE-2024-46687 7.8 HIGH btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
CVE-2024-46678 7.8 HIGH bonding: change ipsec_lock from spin lock to mutex
CVE-2024-46674 7.8 HIGH usb: dwc3: st: fix probed platform device ref count on probe error path
CVE-2024-46680 7.8 HIGH Bluetooth: btnxpuart: Fix random crash seen while removing driver
CVE-2024-46683 7.8 HIGH drm/xe: prevent UAF around preempt fence
CVE-2024-46701 libfs: fix infinite directory reads for offset dir
CVE-2024-46685 pinctrl: single: fix potential NULL dereference in pcs_get_function()
CVE-2024-46712 drm/vmwgfx: Disable coherent dumb buffers without 3d
CVE-2024-46711 mptcp: pm: fix ID 0 endp usage after multiple re-creations
CVE-2024-46675 usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-2024-46708 pinctrl: qcom: x1e80100: Fix special pin offsets

Showing top 20 of 40 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-46677

No comments yet

Leave a comment