CVE-2024-36903

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix potential uninit-value access in __ip6_make_skb()

As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
LinuxLinux>= 605b056d63302ae84eb136e88d4df49124bd5e0d, < 59d74c843ebf46264c7903726cf6f2673a93b07a; >= d65ff2fe877c471aa6e79efa7bd8ff66e147c317, < 40e5444a3ac315b60e94d82226b73cd82145d09e; >= 2c9cefc142c1dc2759e19a92d3b2b3715e985beb, < a05c1ede50e9656f0752e523c7b54f3a3489e9a8; >= ea30388baebcce37fd594d425a65037ca35e59e8, < 68c8ba16ab712eb709c6bab80ff151079d11d97a; >= ea30388baebcce37fd594d425a65037ca35e59e8, < 2367bf254f3a27ecc6e229afd7a8b0a1395f7be3; >= ea30388baebcce37fd594d425a65037ca35e59e8, < 4e13d3a9c25b7080f8a619f961e943fe08c2672c; 165370522cc48127da564a08584a7391e6341908; f394f690a30a5ec0413c62777a058eaf3d6e10d5; 0cf600ca1bdf1d52df977516ee6cee0cadb1f6b1; 02ed5700f40445af02d1c97db25ffc2d04971d9f; >= 5.10.178, < 5.10.248; >= 5.15.107, < 5.15.198; >= 6.1.24, < 6.1.140; >= 4.14.313, < 4.15; >= 4.19.281, < 4.20; >= 5.4.241, < 5.5; >= 6.2.11, < 6.3
LinuxLinux6.3
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.7, < *

References

Timeline

Published
May 30, 2024
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-369047.8In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson NascimCVE-2024-369055.5In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECVE-2024-369067.8In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash:CVE-2024-369085.5In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(CVE-2024-369095.5In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encryptCVE-2024-36919.8A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functiCVE-2024-369108.4In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Don't free decrypted memory In CoCo VMs it is possibleCVE-2024-369115.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs it is possible for CVE-2024-369129.6In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs CVE-2024-369139.3In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCoCVE-2024-369147.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynaCVE-2024-369157.1In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported uns
CVE-2024-36903: Medium severity, CVSS 5.5 | Vulnix