7.8
Élevée
CVE-2024-27396 In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since…
Description
In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of gtp_dellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.9 | premières → < 6.9 | 6.9 |
| Linux 6.8 | premières → < 6.8.9 | 6.8.9 |
| Linux 6.6 | premières → < 6.6.30 | 6.6.30 |
| Linux 6.1 | premières → < 6.1.90 | 6.1.90 |
| Linux 5.15 | premières → < 5.15.158 | 5.15.158 |
| Linux 5.10 | premières → < 5.10.216 | 5.10.216 |
| Linux | 5.5 | Pas de correctif indiqué |
| Linux 5.4 | premières → < 5.4.275 | 5.4.275 |
| Linux 4.19 | premières → < 4.19.313 | 4.19.313 |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RUGGEDCOM RST2428P 3.1 | premières → < 3.1 | 3.1 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions non publiées | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 | premières → < 3.1 | 3.1 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1.1 | 1.1.1 |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée