CVE-2024-49944

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49944
In the Linux kernel, the following vulnerability has been resolved: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason. Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)->reuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)->bind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL. KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617 Call Trace: <TASK> __sys_listen_socket net/socket.c:1883 [inline] __sys_listen+0x1b7/0x230 net/socket.c:1894 __do_sys_listen net/socket.c:1902 [inline]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e4e2e60556c6ed00e8450b720f106a268d23062 Patch
https://git.kernel.org/stable/c/7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7 Patch
https://git.kernel.org/stable/c/89bbead9d897c77d0b566349c8643030ff2abeba Patch
https://git.kernel.org/stable/c/8beee4d8dee76b67c75dc91fd8185d91e845c160 Patch
https://git.kernel.org/stable/c/9230a59eda0878d7ecaa901d876aec76f57bd455 Patch
https://git.kernel.org/stable/c/dd70c8a89ef99c3d53127fe19e51ef47c3f860fa Patch
https://git.kernel.org/stable/c/e7a8442195e8ebd97df467ce4742980ab57edcce Patch
https://git.kernel.org/stable/c/e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5 Patch
https://git.kernel.org/stable/c/f032e1dac30b3376c7d6026fb01a8c403c47a80d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
History

13 Nov 2024, 13:30

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0e4e2e60556c6ed00e8450b720f106a268d23062 - () https://git.kernel.org/stable/c/0e4e2e60556c6ed00e8450b720f106a268d23062 - Patch
References () https://git.kernel.org/stable/c/7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7 - () https://git.kernel.org/stable/c/7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7 - Patch
References () https://git.kernel.org/stable/c/89bbead9d897c77d0b566349c8643030ff2abeba - () https://git.kernel.org/stable/c/89bbead9d897c77d0b566349c8643030ff2abeba - Patch
References () https://git.kernel.org/stable/c/8beee4d8dee76b67c75dc91fd8185d91e845c160 - () https://git.kernel.org/stable/c/8beee4d8dee76b67c75dc91fd8185d91e845c160 - Patch
References () https://git.kernel.org/stable/c/9230a59eda0878d7ecaa901d876aec76f57bd455 - () https://git.kernel.org/stable/c/9230a59eda0878d7ecaa901d876aec76f57bd455 - Patch
References () https://git.kernel.org/stable/c/dd70c8a89ef99c3d53127fe19e51ef47c3f860fa - () https://git.kernel.org/stable/c/dd70c8a89ef99c3d53127fe19e51ef47c3f860fa - Patch
References () https://git.kernel.org/stable/c/e7a8442195e8ebd97df467ce4742980ab57edcce - () https://git.kernel.org/stable/c/e7a8442195e8ebd97df467ce4742980ab57edcce - Patch
References () https://git.kernel.org/stable/c/e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5 - () https://git.kernel.org/stable/c/e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5 - Patch
References () https://git.kernel.org/stable/c/f032e1dac30b3376c7d6026fb01a8c403c47a80d - () https://git.kernel.org/stable/c/f032e1dac30b3376c7d6026fb01a8c403c47a80d - Patch
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*

08 Nov 2024, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0e4e2e60556c6ed00e8450b720f106a268d23062 -
  • () https://git.kernel.org/stable/c/89bbead9d897c77d0b566349c8643030ff2abeba -

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sctp: volver a establecer sk_state en CERRADO si fallo la vinculación automática en sctp_listen_start En sctp_listen_start() invocado por sctp_inet_listen(), debería volver a establecer sk_state en CERRADO si sctp_autobind() falla por cualquier motivo. De lo contrario, la próxima vez que se llame a sctp_inet_listen(), si sctp_sk(sk)-&gt;reuse ya está establecido mediante setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)-&gt;bind_hash se desreferenciará ya que sk_state está ESCUCHANDO, lo que provoca un bloqueo ya que bind_hash es NULL. KASAN: null-ptr-deref en el rango [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617 Seguimiento de llamadas: __sys_listen_socket net/socket.c:1883 [en línea] __sys_listen+0x1b7/0x230 net/socket.c:1894 __do_sys_listen net/socket.c:1902 [en línea]

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2024-11-13 13:30

NVD link : CVE-2024-49944

Mitre link : CVE-2024-49944

CVE.ORG link : CVE-2024-49944

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo