CVE-2024-26735 - Vulnerability Details

Vendors	Products
Debian	Debian Linux
Linux	Linux Kernel
Netapp	8300 8300 Firmware 8700 8700 Firmware A400 A400 Firmware C400 C400 Firmware E-series Santricity Os Controller H610c H610c Firmware H610s H610s Firmware H615c H615c Firmware
Redhat	Enterprise Linux Rhel Aus Rhel E4s Rhel Eus Rhel Tus

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.8.1.rt7.349.el8_10	cpe:/a:redhat:enterprise_linux:8::nfv	RHSA-2024:4352	2024-07-08T00:00:00Z
kernel-0:4.18.0-553.8.1.el8_10	cpe:/o:redhat:enterprise_linux:8	RHSA-2024:4211	2024-07-02T00:00:00Z
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
kernel-0:4.18.0-372.111.1.el8_6	cpe:/o:redhat:rhel_aus:8.6	RHSA-2024:4447	2024-07-10T00:00:00Z
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
kernel-0:4.18.0-372.111.1.el8_6	cpe:/o:redhat:rhel_tus:8.6	RHSA-2024:4447	2024-07-10T00:00:00Z
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
kernel-0:4.18.0-372.111.1.el8_6	cpe:/o:redhat:rhel_e4s:8.6	RHSA-2024:4447	2024-07-10T00:00:00Z
Red Hat Enterprise Linux 8.8 Extended Update Support
kernel-0:4.18.0-477.64.1.el8_8	cpe:/o:redhat:rhel_eus:8.8	RHSA-2024:4740	2024-07-23T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.20.1.el9_4	cpe:/a:redhat:enterprise_linux:9	RHSA-2024:3619	2024-06-05T00:00:00Z
kernel-0:5.14.0-427.20.1.el9_4	cpe:/o:redhat:enterprise_linux:9	RHSA-2024:3619	2024-06-05T00:00:00Z
Red Hat Enterprise Linux 9.2 Extended Update Support
kernel-0:5.14.0-284.67.1.el9_2	cpe:/a:redhat:rhel_eus:9.2	RHSA-2024:3461	2024-05-29T00:00:00Z
kernel-rt-0:5.14.0-284.67.1.rt14.352.el9_2	cpe:/a:redhat:rhel_eus:9.2::nfv	RHSA-2024:3460	2024-05-29T00:00:00Z

Link	Providers
https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b
https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b
https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6
https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d
https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197
https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee
https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa
https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
https://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26735-462f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26735
https://security.netapp.com/advisory/ntap-20241101-0012/
https://www.cve.org/CVERecord?id=CVE-2024-26735

Type	Values Removed	Values Added
First Time appeared		Debian Debian debian Linux Linux Linux linux Kernel Netapp Netapp 8300 Netapp 8300 Firmware Netapp 8700 Netapp 8700 Firmware Netapp a400 Netapp a400 Firmware Netapp c400 Netapp c400 Firmware Netapp e-series Santricity Os Controller Netapp h610c Netapp h610c Firmware Netapp h610s Netapp h610s Firmware Netapp h615c Netapp h615c Firmware
CPEs		cpe:2.3:a:netapp:e-series_santricity_os_controller:::::::: cpe:2.3:h:netapp:8300:::::::: cpe:2.3:h:netapp:8700:::::::: cpe:2.3:h:netapp:a400:::::::: cpe:2.3:h:netapp:c400:::::::: cpe:2.3:h:netapp:h610c:::::::: cpe:2.3:h:netapp:h610s:::::::: cpe:2.3:h:netapp:h615c:::::::: cpe:2.3:o:debian:debian_linux:10.0:::::::* cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.8:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc3:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc4:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc5:::::: cpe:2.3:o:netapp:8300_firmware:-:::::::* cpe:2.3:o:netapp:8700_firmware:-:::::::* cpe:2.3:o:netapp:a400_firmware:-:::::::* cpe:2.3:o:netapp:c400_firmware:-:::::::* cpe:2.3:o:netapp:h610c_firmware:-:::::::* cpe:2.3:o:netapp:h610s_firmware:-:::::::* cpe:2.3:o:netapp:h615c_firmware:-:::::::*
Vendors & Products		Debian Debian debian Linux Linux Linux linux Kernel Netapp Netapp 8300 Netapp 8300 Firmware Netapp 8700 Netapp 8700 Firmware Netapp a400 Netapp a400 Firmware Netapp c400 Netapp c400 Firmware Netapp e-series Santricity Os Controller Netapp h610c Netapp h610c Firmware Netapp h610s Netapp h610s Firmware Netapp h615c Netapp h615c Firmware

Type	Values Removed	Values Added
References		https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html https://security.netapp.com/advisory/ntap-20241101-0012/

Type	Values Removed	Values Added
References	https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-26735", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.165Z", "datePublished": "2024-04-03T17:00:21.972Z", "dateUpdated": "2025-02-27T20:01:54.331Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:46:08.259Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: fix possible use-after-free and null-ptr-deref\n\nThe pernet operations structure for the subsystem must be registered\nbefore registering the generic netlink family."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ipv6/seg6.c"], "versions": [{"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "953f42934533c151f440cd32390044d2396b87aa", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "82831e3ff76ef09fb184eb93b79a3eb3fb284f1d", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "65c38f23d10ff79feea1e5d50b76dc7af383c1e6", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "91b020aaa1e59bfb669d34c968e3db3d5416bcee", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "8391b9b651cfdf80ab0f1dc4a489f9d67386e197", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "9e02973dbc6a91e40aa4f5d87b8c47446fbfce44", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "02b08db594e8218cfbc0e4680d4331b457968a9b", "status": "affected", "versionType": "git"}, {"version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "5559cea2d5aa3018a5f00dd2aca3427ba09b386b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ipv6/seg6.c"], "versions": [{"version": "4.10", "status": "affected"}, {"version": "0", "lessThan": "4.10", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.308", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.270", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.211", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.150", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.80", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.19", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.7", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa"}, {"url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d"}, {"url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6"}, {"url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee"}, {"url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197"}, {"url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44"}, {"url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b"}, {"url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b"}], "title": "ipv6: sr: fix possible use-after-free and null-ptr-deref", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-16T14:17:44.078376Z", "id": "CVE-2024-26735", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-27T20:01:54.331Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20241101-0012/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-11-01T17:03:12.597Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

cveId : CVE-2024-26735 (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

state : PUBLISHED (string)

assignerShortName : Linux (string)

dateReserved : 2024-02-19T14:20:24.165Z (string)

datePublished : 2024-04-03T17:00:21.972Z (string)

dateUpdated : 2025-02-27T20:01:54.331Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2024-12-19T08:46:08.259Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family. (string)

}

]

affected : [ »

0 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : net/ipv6/seg6.c (string)

]

versions : [ »

0 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 953f42934533c151f440cd32390044d2396b87aa (string)

status : affected (string)

versionType : git (string)

}

1 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

status : affected (string)

versionType : git (string)

}

2 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

status : affected (string)

versionType : git (string)

}

3 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

status : affected (string)

versionType : git (string)

}

4 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

status : affected (string)

versionType : git (string)

}

5 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

status : affected (string)

versionType : git (string)

}

6 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 02b08db594e8218cfbc0e4680d4331b457968a9b (string)

status : affected (string)

versionType : git (string)

}

7 : { »

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

status : affected (string)

versionType : git (string)

}

]

}

1 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : affected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : net/ipv6/seg6.c (string)

]

versions : [ »

0 : { »

version : 4.10 (string)

status : affected (string)

}

1 : { »

version : 0 (string)

lessThan : 4.10 (string)

status : unaffected (string)

versionType : semver (string)

}

2 : { »

version : 4.19.308 (string)

lessThanOrEqual : 4.19.* (string)

status : unaffected (string)

versionType : semver (string)

}

3 : { »

version : 5.4.270 (string)

lessThanOrEqual : 5.4.* (string)

status : unaffected (string)

versionType : semver (string)

}

4 : { »

version : 5.10.211 (string)

lessThanOrEqual : 5.10.* (string)

status : unaffected (string)

versionType : semver (string)

}

5 : { »

version : 5.15.150 (string)

lessThanOrEqual : 5.15.* (string)

status : unaffected (string)

versionType : semver (string)

}

6 : { »

version : 6.1.80 (string)

lessThanOrEqual : 6.1.* (string)

status : unaffected (string)

versionType : semver (string)

}

7 : { »

version : 6.6.19 (string)

lessThanOrEqual : 6.6.* (string)

status : unaffected (string)

versionType : semver (string)

}

8 : { »

version : 6.7.7 (string)

lessThanOrEqual : 6.7.* (string)

status : unaffected (string)

versionType : semver (string)

}

9 : { »

version : 6.8 (string)

lessThanOrEqual : * (string)

status : unaffected (string)

versionType : original_commit_for_fix (string)

}

]

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa (string)

}

1 : { »

url : https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

}

2 : { »

url : https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

}

4 : { »

url : https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

}

5 : { »

url : https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

}

6 : { »

url : https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b (string)

}

7 : { »

url : https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

}

]

title : ipv6: sr: fix possible use-after-free and null-ptr-deref (string)

x_generator : { »

engine : bippy-5f407fcff5a0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-07-16T14:17:44.078376Z (string)

id : CVE-2024-26735 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-27T20:01:54.331Z (string)

}

1 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

tags : [ »

0 : x_transferred (string)

]

}

8 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html (string)

tags : [ »

0 : x_transferred (string)

]

}

9 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html (string)

tags : [ »

0 : x_transferred (string)

]

}

10 : { »

url : https://security.netapp.com/advisory/ntap-20241101-0012/ (string)

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-11-01T17:03:12.597Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20241101-0012/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-11-01T17:03:12.597Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26735", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-16T14:17:44.078376Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-16T14:21:40.584Z"}}], "cna": {"title": "ipv6: sr: fix possible use-after-free and null-ptr-deref", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "953f42934533c151f440cd32390044d2396b87aa", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "82831e3ff76ef09fb184eb93b79a3eb3fb284f1d", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "65c38f23d10ff79feea1e5d50b76dc7af383c1e6", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "91b020aaa1e59bfb669d34c968e3db3d5416bcee", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "8391b9b651cfdf80ab0f1dc4a489f9d67386e197", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "9e02973dbc6a91e40aa4f5d87b8c47446fbfce44", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "02b08db594e8218cfbc0e4680d4331b457968a9b", "versionType": "git"}, {"status": "affected", "version": "915d7e5e5930b4f01d0971d93b9b25ed17d221aa", "lessThan": "5559cea2d5aa3018a5f00dd2aca3427ba09b386b", "versionType": "git"}], "programFiles": ["net/ipv6/seg6.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.10"}, {"status": "unaffected", "version": "0", "lessThan": "4.10", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.308", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.270", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.211", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.150", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.80", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.19", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.7", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/ipv6/seg6.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa"}, {"url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d"}, {"url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6"}, {"url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee"}, {"url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197"}, {"url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44"}, {"url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b"}, {"url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: fix possible use-after-free and null-ptr-deref\n\nThe pernet operations structure for the subsystem must be registered\nbefore registering the generic netlink family."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:46:08.259Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26735", "state": "PUBLISHED", "dateUpdated": "2025-02-27T20:01:54.331Z", "dateReserved": "2024-02-19T14:20:24.165Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T17:00:21.972Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

tags : [ »

0 : x_transferred (string)

]

}

8 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html (string)

tags : [ »

0 : x_transferred (string)

]

}

9 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html (string)

tags : [ »

0 : x_transferred (string)

]

}

10 : { »

url : https://security.netapp.com/advisory/ntap-20241101-0012/ (string)

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-11-01T17:03:12.597Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-26735 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-07-16T14:17:44.078376Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-16T14:21:40.584Z (string)

}

]

cna : { »

title : ipv6: sr: fix possible use-after-free and null-ptr-deref (string)

affected : [ »

0 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 953f42934533c151f440cd32390044d2396b87aa (string)

versionType : git (string)

}

1 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

versionType : git (string)

}

2 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

versionType : git (string)

}

3 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

versionType : git (string)

}

4 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

versionType : git (string)

}

5 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

versionType : git (string)

}

6 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 02b08db594e8218cfbc0e4680d4331b457968a9b (string)

versionType : git (string)

}

7 : { »

status : affected (string)

version : 915d7e5e5930b4f01d0971d93b9b25ed17d221aa (string)

lessThan : 5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

versionType : git (string)

}

]

programFiles : [ »

0 : net/ipv6/seg6.c (string)

]

defaultStatus : unaffected (string)

}

1 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10 (string)

}

1 : { »

status : unaffected (string)

version : 0 (string)

lessThan : 4.10 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 4.19.308 (string)

versionType : semver (string)

lessThanOrEqual : 4.19.* (string)

}

3 : { »

status : unaffected (string)

version : 5.4.270 (string)

versionType : semver (string)

lessThanOrEqual : 5.4.* (string)

}

4 : { »

status : unaffected (string)

version : 5.10.211 (string)

versionType : semver (string)

lessThanOrEqual : 5.10.* (string)

}

5 : { »

status : unaffected (string)

version : 5.15.150 (string)

versionType : semver (string)

lessThanOrEqual : 5.15.* (string)

}

6 : { »

status : unaffected (string)

version : 6.1.80 (string)

versionType : semver (string)

lessThanOrEqual : 6.1.* (string)

}

7 : { »

status : unaffected (string)

version : 6.6.19 (string)

versionType : semver (string)

lessThanOrEqual : 6.6.* (string)

}

8 : { »

status : unaffected (string)

version : 6.7.7 (string)

versionType : semver (string)

lessThanOrEqual : 6.7.* (string)

}

9 : { »

status : unaffected (string)

version : 6.8 (string)

versionType : original_commit_for_fix (string)

lessThanOrEqual : * (string)

}

]

programFiles : [ »

0 : net/ipv6/seg6.c (string)

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa (string)

}

1 : { »

url : https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

}

2 : { »

url : https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

}

4 : { »

url : https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

}

5 : { »

url : https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

}

6 : { »

url : https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b (string)

}

7 : { »

url : https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

}

]

x_generator : { »

engine : bippy-5f407fcff5a0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family. (string)

}

]

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2024-12-19T08:46:08.259Z (string)

}

cveMetadata : { »

cveId : CVE-2024-26735 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-27T20:01:54.331Z (string)

dateReserved : 2024-02-19T14:20:24.165Z (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

datePublished : 2024-04-03T17:00:21.972Z (string)

assignerShortName : Linux (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A59FADE0-1297-4295-833A-F3A857A9CDAC", "versionEndExcluding": "4.19.308", "versionStartIncluding": "4.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D8044B1-C7E8-44A4-9F03-A4D7BCDB1721", "versionEndExcluding": "5.4.270", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DDA4DCF-671D-415D-94DF-6E3C77DF0704", "versionEndExcluding": "5.10.211", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95", "versionEndExcluding": "5.15.150", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B", "versionEndExcluding": "6.1.80", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0", "versionEndExcluding": "6.6.19", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B", "versionEndExcluding": "6.7.7", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4E73901F-666D-4D8B-BDFD-93DD2F70C74B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:8300:*:*:*:*:*:*:*:*", "matchCriteriaId": "440F1F15-8BCC-4B14-9E90-210F78BD02DC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "34B25BEF-8708-4E2C-8BA6-EBCD5267EB04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:8700:*:*:*:*:*:*:*:*", "matchCriteriaId": "E0B19AB1-1441-4856-BA7D-2E8000E8FCE4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "04E3BD77-8915-4FFC-8483-5DB5D610F829", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:a400:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D8DFFE9-2772-4B12-8962-750DF24A352E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC7AD92-8B33-4137-A4EC-08641E4AF857", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:c400:*:*:*:*:*:*:*:*", "matchCriteriaId": "8FA5EA99-2F44-4CEE-A0B7-673C4F8287C9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "89612649-BACF-4FAC-9BA4-324724FD93A6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:h610c:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A2FDC2F-BC6C-4845-BF4F-572B7A1432C6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD7CFE0E-9D1E-4495-B302-89C3096FC0DF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:h610s:*:*:*:*:*:*:*:*", "matchCriteriaId": "80A6BDDA-17BE-4EE5-BEFC-F24235A3C9F3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5921A877-18BF-43FE-915C-D226E140ACFC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:h615c:*:*:*:*:*:*:*:*", "matchCriteriaId": "136641AA-7976-4F2D-8336-D75F440D2058", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C5DA53D-744B-4087-AEA9-257F18949E4D", "versionEndIncluding": "11.70.2", "versionStartIncluding": "11.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: fix possible use-after-free and null-ptr-deref\n\nThe pernet operations structure for the subsystem must be registered\nbefore registering the generic netlink family."}, {"lang": "es", "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: ipv6:sr: corrige posible use-after-free y null-ptr-deref La estructura de operaciones pernet para el subsystem debe registrarse antes de registrar la familia netlink gen\u00e9rica."}], "id": "CVE-2024-26735", "lastModified": "2025-03-17T16:05:01.547", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-04-03T17:15:51.147", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20241101-0012/"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}, {"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A59FADE0-1297-4295-833A-F3A857A9CDAC (string)

versionEndExcluding : 4.19.308 (string)

versionStartIncluding : 4.10 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D8044B1-C7E8-44A4-9F03-A4D7BCDB1721 (string)

versionEndExcluding : 5.4.270 (string)

versionStartIncluding : 4.20 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7DDA4DCF-671D-415D-94DF-6E3C77DF0704 (string)

versionEndExcluding : 5.10.211 (string)

versionStartIncluding : 5.5 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CB6C60DE-9E0C-46C5-904D-D4F4031F8E95 (string)

versionEndExcluding : 5.15.150 (string)

versionStartIncluding : 5.11 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BA7850CE-97C9-4408-A348-6173296BCA2B (string)

versionEndExcluding : 6.1.80 (string)

versionStartIncluding : 5.16 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D82004C-B2AE-4048-9344-32EFF65953B0 (string)

versionEndExcluding : 6.6.19 (string)

versionStartIncluding : 6.2 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 575EE16B-67F2-4B5B-B5F8-1877715C898B (string)

versionEndExcluding : 6.7.7 (string)

versionStartIncluding : 6.7 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* (string)

matchCriteriaId : B9F4EA73-0894-400F-A490-3A397AB7A517 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 056BD938-0A27-4569-B391-30578B309EE3 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:* (string)

matchCriteriaId : F02056A5-B362-4370-9FF8-6F0BD384D520 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:* (string)

matchCriteriaId : 62075ACE-B2A0-4B16-829D-B3DA5AE5CC41 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:* (string)

matchCriteriaId : A780F817-2A77-4130-A9B7-5C25606314E3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 07B237A9-69A3-4A9C-9DA0-4E06BD37AE73 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4E73901F-666D-4D8B-BDFD-93DD2F70C74B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:8300:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 440F1F15-8BCC-4B14-9E90-210F78BD02DC (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 34B25BEF-8708-4E2C-8BA6-EBCD5267EB04 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:8700:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E0B19AB1-1441-4856-BA7D-2E8000E8FCE4 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 04E3BD77-8915-4FFC-8483-5DB5D610F829 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:a400:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6D8DFFE9-2772-4B12-8962-750DF24A352E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9AC7AD92-8B33-4137-A4EC-08641E4AF857 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:c400:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8FA5EA99-2F44-4CEE-A0B7-673C4F8287C9 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89612649-BACF-4FAC-9BA4-324724FD93A6 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:h610c:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A2FDC2F-BC6C-4845-BF4F-572B7A1432C6 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

7 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FD7CFE0E-9D1E-4495-B302-89C3096FC0DF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:h610s:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 80A6BDDA-17BE-4EE5-BEFC-F24235A3C9F3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

8 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5921A877-18BF-43FE-915C-D226E140ACFC (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:netapp:h615c:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 136641AA-7976-4F2D-8336-D75F440D2058 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

9 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8C5DA53D-744B-4087-AEA9-257F18949E4D (string)

versionEndIncluding : 11.70.2 (string)

versionStartIncluding : 11.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family. (string)

}

1 : { »

lang : es (string)

value : En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: ipv6:sr: corrige posible use-after-free y null-ptr-deref La estructura de operaciones pernet para el subsystem debe registrarse antes de registrar la familia netlink genérica. (string)

}

]

id : CVE-2024-26735 (string)

lastModified : 2025-03-17T16:05:01.547 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-04-03T17:15:51.147 (string)

references : [ »

0 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b (string)

}

1 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

}

2 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

}

3 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

}

4 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

}

5 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

}

6 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa (string)

}

7 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

}

8 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b (string)

}

10 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6 (string)

}

11 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d (string)

}

12 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197 (string)

}

13 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee (string)

}

14 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa (string)

}

15 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 (string)

}

16 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html (string)

}

17 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html (string)

}

18 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20241101-0012/ (string)

}

]

sourceIdentifier : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

1 : { »

lang : en (string)

value : CWE-476 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2024:4352", "cpe": "cpe:/a:redhat:enterprise_linux:8::nfv", "package": "kernel-rt-0:4.18.0-553.8.1.rt7.349.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-07-08T00:00:00Z"}, {"advisory": "RHSA-2024:4211", "cpe": "cpe:/o:redhat:enterprise_linux:8", "package": "kernel-0:4.18.0-553.8.1.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-07-02T00:00:00Z"}, {"advisory": "RHSA-2024:4447", "cpe": "cpe:/o:redhat:rhel_aus:8.6", "package": "kernel-0:4.18.0-372.111.1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2024-07-10T00:00:00Z"}, {"advisory": "RHSA-2024:4447", "cpe": "cpe:/o:redhat:rhel_tus:8.6", "package": "kernel-0:4.18.0-372.111.1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2024-07-10T00:00:00Z"}, {"advisory": "RHSA-2024:4447", "cpe": "cpe:/o:redhat:rhel_e4s:8.6", "package": "kernel-0:4.18.0-372.111.1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2024-07-10T00:00:00Z"}, {"advisory": "RHSA-2024:4740", "cpe": "cpe:/o:redhat:rhel_eus:8.8", "package": "kernel-0:4.18.0-477.64.1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Extended Update Support", "release_date": "2024-07-23T00:00:00Z"}, {"advisory": "RHSA-2024:3619", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-427.20.1.el9_4", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-06-05T00:00:00Z"}, {"advisory": "RHSA-2024:3619", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-427.20.1.el9_4", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-06-05T00:00:00Z"}, {"advisory": "RHSA-2024:3461", "cpe": "cpe:/a:redhat:rhel_eus:9.2", "package": "kernel-0:5.14.0-284.67.1.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "release_date": "2024-05-29T00:00:00Z"}, {"advisory": "RHSA-2024:3460", "cpe": "cpe:/a:redhat:rhel_eus:9.2::nfv", "package": "kernel-rt-0:5.14.0-284.67.1.rt14.352.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "release_date": "2024-05-29T00:00:00Z"}], "bugzilla": {"description": "kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref", "id": "2273278", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273278"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-416->CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nipv6: sr: fix possible use-after-free and null-ptr-deref\nThe pernet operations structure for the subsystem must be registered\nbefore registering the generic netlink family.", "A use-after-free flaw was found in the Linux kernel\u2019s IPv6 protocol functionality. This flaw allows a local user to potentially crash the system."], "name": "CVE-2024-26735", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-26735\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-26735\nhttps://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26735-462f@gregkh/T"], "threat_severity": "Moderate"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2024:4352 (string)

cpe : cpe:/a:redhat:enterprise_linux:8::nfv (string)

package : kernel-rt-0:4.18.0-553.8.1.rt7.349.el8_10 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2024-07-08T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2024:4211 (string)

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

package : kernel-0:4.18.0-553.8.1.el8_10 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2024-07-02T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2024:4447 (string)

cpe : cpe:/o:redhat:rhel_aus:8.6 (string)

package : kernel-0:4.18.0-372.111.1.el8_6 (string)

product_name : Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (string)

release_date : 2024-07-10T00:00:00Z (string)

}

3 : { »

advisory : RHSA-2024:4447 (string)

cpe : cpe:/o:redhat:rhel_tus:8.6 (string)

package : kernel-0:4.18.0-372.111.1.el8_6 (string)

product_name : Red Hat Enterprise Linux 8.6 Telecommunications Update Service (string)

release_date : 2024-07-10T00:00:00Z (string)

}

4 : { »

advisory : RHSA-2024:4447 (string)

cpe : cpe:/o:redhat:rhel_e4s:8.6 (string)

package : kernel-0:4.18.0-372.111.1.el8_6 (string)

product_name : Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (string)

release_date : 2024-07-10T00:00:00Z (string)

}

5 : { »

advisory : RHSA-2024:4740 (string)

cpe : cpe:/o:redhat:rhel_eus:8.8 (string)

package : kernel-0:4.18.0-477.64.1.el8_8 (string)

product_name : Red Hat Enterprise Linux 8.8 Extended Update Support (string)

release_date : 2024-07-23T00:00:00Z (string)

}

6 : { »

advisory : RHSA-2024:3619 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

package : kernel-0:5.14.0-427.20.1.el9_4 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2024-06-05T00:00:00Z (string)

}

7 : { »

advisory : RHSA-2024:3619 (string)

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

package : kernel-0:5.14.0-427.20.1.el9_4 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2024-06-05T00:00:00Z (string)

}

8 : { »

advisory : RHSA-2024:3461 (string)

cpe : cpe:/a:redhat:rhel_eus:9.2 (string)

package : kernel-0:5.14.0-284.67.1.el9_2 (string)

product_name : Red Hat Enterprise Linux 9.2 Extended Update Support (string)

release_date : 2024-05-29T00:00:00Z (string)

}

9 : { »

advisory : RHSA-2024:3460 (string)

cpe : cpe:/a:redhat:rhel_eus:9.2::nfv (string)

package : kernel-rt-0:5.14.0-284.67.1.rt14.352.el9_2 (string)

product_name : Red Hat Enterprise Linux 9.2 Extended Update Support (string)

release_date : 2024-05-29T00:00:00Z (string)

}

]

bugzilla : { »

description : kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (string)

id : 2273278 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2273278 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

status : verified (string)

}

cwe : CWE-416->CWE-476 (string)

details : [ »

0 : In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family. (string)

1 : A use-after-free flaw was found in the Linux kernel’s IPv6 protocol functionality. This flaw allows a local user to potentially crash the system. (string)

]

name : CVE-2024-26735 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2024-04-03T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-26735 https://nvd.nist.gov/vuln/detail/CVE-2024-26735 https://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26735-462f@gregkh/T (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object