CVE-2024-46677

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gtp: fix a potential NULL pointer dereference

When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case.

Fix it by returning an error pointer with the error code carried from sockfd_lookup().

(I found this bug during code inspection.)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < 620fe9809752fae91b4190e897b81ed9976dfb39; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < 8bbb9e4e0e66a39282e582d0440724055404b38c; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < 4643b91691e969b1b9ad54bf552d7a990cfa3b87; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < e8b9930b0eb045d19e883c65ff9676fc89320c70; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < 28c67f0f84f889fe9f4cbda8354132b20dc9212d; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < 612edd35f2a3910ab1f61c1f2338889d4ba99fa2; >= 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9, < defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda
LinuxLinux4.12

References

Timeline

Published
Sep 13, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-466785.5In the Linux kernel, the following vulnerability has been resolved: bonding: change ipsec_lock from spin lock to mutex In the cited commitCVE-2024-466794.7In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reCVE-2024-46686.4The Gum Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Price Table and Post Slider widgets in allCVE-2024-466805.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver ThisCVE-2024-466815.5In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I have seen the WARN_ON(CVE-2024-466825.5In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open Prior tCVE-2024-466837.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of theCVE-2024-466845.5In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined CVE-2024-466855.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcs_get_function() CVE-2024-466865.5In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() ThisCVE-2024-466877.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chuCVE-2024-466885.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially f