CVE-2024-44990

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bonding: fix null pointer deref in bond_ipsec_offload_ok

We must check if there is an active slave before dereferencing the pointer.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 18cb261afd7bf50134e5ccacc5ec91ea16efadd4, < 81216b9352be43f8958092d379f6dec85443c309; >= 18cb261afd7bf50134e5ccacc5ec91ea16efadd4, < 2f5bdd68c1ce64bda6bef4d361a3de23b04ccd59; >= 18cb261afd7bf50134e5ccacc5ec91ea16efadd4, < 32a0173600c63aadaf2103bf02f074982e8602ab; >= 18cb261afd7bf50134e5ccacc5ec91ea16efadd4, < 0707260a18312bbcd2a5668584e3692d0a29e3f6; >= 18cb261afd7bf50134e5ccacc5ec91ea16efadd4, < b70b0ddfed31fc92c8dc722d0afafc8e14cb550c; >= 18cb261afd7bf50134e5ccacc5ec91ea16efadd4, < 95c90e4ad89d493a7a14fa200082e466e2548f9d
LinuxLinux5.9
SiemensRUGGEDCOM RST2428P< V3.1
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family—
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family< V3.1
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1
SiemensRUGGEDCOM RST2428P< V3.2
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family< V3.2
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family< V3.2

References

Timeline

Published
Sep 4, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-449915.5In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcp_sk_exit_batch Its possible thCVE-2024-449925.5In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid possible NULL dereference in cifs_free_subrequest() CVE-2024-449937.1In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` When enabling UCVE-2024-449945.5In the Linux kernel, the following vulnerability has been resolved: iommu: Restore lost return in iommu_report_device_fault() When iommu_rCVE-2024-449955.5In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC during resetting WhenCVE-2024-449965.5In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive ->recvmsg calls After a vsock socket has been addCVE-2024-449977.8In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_blCVE-2024-449987.8In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereferCVE-2024-449997.1In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use CVE-2024-45008.8A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknoCVE-2024-450005.5In the Linux kernel, the following vulnerability has been resolved: fs/netfs/fscache_cookie: add missing "n_accesses" check This fixes a NCVE-2024-450015.5In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atomic op panic The MAN
CVE-2024-44990: Medium severity, CVSS 5.5 | Vulnix