In the Linux kernel, the following vulnerability has been resolved:

tipc: fix a possible memleak in tipc_buf_append

__skb_linearize() doesn't free the skb when it fails, so move
'*buf = NULL' after __skb_linearize(), so that the skb can be
freed on the err path.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
4b1761898861117c97066aea6c58f68a7787f0bf affected < 01cd1b7b685751ee422d00d050292a3d277652d6
64d17ec9f1ded042c4b188d15734f33486ed9966 affected < 2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae
6da24cfc83ba4f97ea44fc7ae9999a006101755c affected < adbce6d20da6254c86425a8d4359b221b5ccbccd
b7df21cf1b79ab7026f545e7bf837bd5750ac026 affected < 42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c
b7df21cf1b79ab7026f545e7bf837bd5750ac026 affected < d03a82f4f8144befdc10518e732e2a60b34c870e
b7df21cf1b79ab7026f545e7bf837bd5750ac026 affected < 614c5a5ae45a921595952117b2e2bd4d4bf9b574
b7df21cf1b79ab7026f545e7bf837bd5750ac026 affected < 3210d34fda4caff212cb53729e6bd46de604d565
b7df21cf1b79ab7026f545e7bf837bd5750ac026 affected < 97bf6f81b29a8efaf5d0983251a7450e5794370d
b2c8d28c34b3070407cb1741f9ba3f15d0284b8b affected —
5489f30bb78ff0dafb4229a69632afc2ba20765c affected —
436d650d374329a591c30339a91fa5078052ed1e affected —
ace300eecbccaa698e2b472843c74a5f33f7dce8 affected —
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
4.19.314 unaffected ≤ 4.19.*
5.4.276 unaffected ≤ 5.4.*
5.10.217 unaffected ≤ 5.10.*
5.15.159 unaffected ≤ 5.15.*
6.1.91 unaffected ≤ 6.1.*
6.6.31 unaffected ≤ 6.6.*
6.8.10 unaffected ≤ 6.8.*
6.9 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:5102 2024-08-08T00:00:00Z
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z
Red Hat Enterprise Linux 9.4 Extended Update Support
kernel-0:5.14.0-427.55.1.el9_4 cpe:/a:redhat:rhel_eus:9.4 RHSA-2025:1658 2025-02-19T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Debian Subscribe
Debian Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Rhel Eus Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3840-1 linux security update
Debian DLA Debian DLA DLA-3843-1 linux-5.10 security update
Debian DSA Debian DSA DSA-5703-1 linux security update
Ubuntu USN Ubuntu USN USN-6949-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6949-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6950-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6950-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6950-3 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6950-4 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-6951-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6951-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6951-3 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6951-4 Linux kernel (BlueField) vulnerabilities
Ubuntu USN Ubuntu USN USN-6952-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6953-1 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6955-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6956-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6957-1 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6979-1 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-7019-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/01cd1b7b685751ee422d00d050292a3d277652d6 cve-icon cve-icon
https://git.kernel.org/stable/c/2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae cve-icon cve-icon
https://git.kernel.org/stable/c/3210d34fda4caff212cb53729e6bd46de604d565 cve-icon cve-icon
https://git.kernel.org/stable/c/42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c cve-icon cve-icon
https://git.kernel.org/stable/c/614c5a5ae45a921595952117b2e2bd4d4bf9b574 cve-icon cve-icon
https://git.kernel.org/stable/c/97bf6f81b29a8efaf5d0983251a7450e5794370d cve-icon cve-icon
https://git.kernel.org/stable/c/adbce6d20da6254c86425a8d4359b221b5ccbccd cve-icon cve-icon
https://git.kernel.org/stable/c/d03a82f4f8144befdc10518e732e2a60b34c870e cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024053040-CVE-2024-36954-b1b8@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-36954 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-36954 cve-icon
History

Fri, 11 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.0002}

 epss

{'score': 0.00019}

Wed, 19 Feb 2025 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.4
Vendors & Products Redhat rhel Eus

Tue, 14 Jan 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Tue, 05 Nov 2024 10:45:00 +0000

Type Values Removed Values Added
References

Tue, 05 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Aug 2024 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
cpe:/o:redhat:enterprise_linux:8
Vendors & Products Redhat
Redhat enterprise Linux

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T12:56:33.433Z

Reserved: 2024-05-30T15:25:07.080Z

Link: CVE-2024-36954

cve-icon Vulnrichment

Updated: 2024-08-02T03:43:50.499Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-30T16:15:18.313

Modified: 2025-01-14T16:27:50.843

Link: CVE-2024-36954

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-30T00:00:00Z

Links: CVE-2024-36954 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses