Not rated
CVE-2024-42154 In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see…
Description
In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.10 | earliest → < 6.10 | 6.10 |
| Linux 6.9 | earliest → < 6.9.9 | 6.9.9 |
| Linux 6.6 | earliest → < 6.6.39 | 6.6.39 |
| Linux 6.1 | earliest → < 6.1.98 | 6.1.98 |
| Linux 5.15 | earliest → < 5.15.163 | 5.15.163 |
| Linux 5.10 | earliest → < 5.10.222 | 5.10.222 |
| Linux 5.4 | earliest → < 5.4.280 | 5.4.280 |
| Linux 4.19 | earliest → < 4.19.318 | 4.19.318 |
| Linux | 3.14 | No fix stated |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RST2428P 3.1 | earliest → < 3.1 | 3.1 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions not published | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 | earliest → < 3.1 | 3.1 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 TM MFP - BIOS | Versions not published | |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated