CVE-2024-46677

MEDIUM EPSS 17.4%
Published Sep 13, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Sep 13, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.)

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
17.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 12

VendorProductVersionRange
linuxlinux_kernel*≥4.12  –  <4.19.321
linuxlinux_kernel*≥4.20  –  <5.4.283
linuxlinux_kernel*≥5.5  –  <5.10.225
linuxlinux_kernel*≥5.11  –  <5.15.166
linuxlinux_kernel*≥5.16  –  <6.1.108
linuxlinux_kernel*≥6.2  –  <6.6.49
linuxlinux_kernel*≥6.7  –  <6.10.8
linuxlinux_kernel6.11any
linuxlinux_kernel6.11any
linuxlinux_kernel6.11any
linuxlinux_kernel6.11any
linuxlinux_kernel6.11any

References 10

  • git.kernel.org https://git.kernel.org/stable/c/28c67f0f84f889fe9f4cbda8354132b20dc9212d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4643b91691e969b1b9ad54bf552d7a990cfa3b87
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/620fe9809752fae91b4190e897b81ed9976dfb39
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8bbb9e4e0e66a39282e582d0440724055404b38c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e8b9930b0eb045d19e883c65ff9676fc89320c70
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/28c67f0f84f889fe9f4cbda8354132b20dc9212d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4643b91691e969b1b9ad54bf552d7a990cfa3b87
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/620fe9809752fae91b4190e897b81ed9976dfb39
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8bbb9e4e0e66a39282e582d0440724055404b38c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e8b9930b0eb045d19e883c65ff9676fc89320c70
    Patch