CVE-2024-46677

Description

In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.)

Reserved 2024-09-11 | Published 2024-09-13 | Updated 2024-11-05 | Assigner Linux

Product status

Default status
unaffected

1e3a3abd8b28 before 620fe9809752
affected

1e3a3abd8b28 before bdd99e5f0ad5
affected

1e3a3abd8b28 before 8bbb9e4e0e66
affected

1e3a3abd8b28 before 4643b91691e9
affected

1e3a3abd8b28 before e8b9930b0eb0
affected

1e3a3abd8b28 before 28c67f0f84f8
affected

1e3a3abd8b28 before 612edd35f2a3
affected

1e3a3abd8b28 before defd8b3c37b0
affected

Default status
affected

4.12
affected

Any version before 4.12
unaffected

4.19.321
unaffected

5.4.283
unaffected

5.10.225
unaffected

5.15.166
unaffected

6.1.108
unaffected

6.6.49
unaffected

6.10.8
unaffected

6.11
unaffected

References

git.kernel.org/...c/620fe9809752fae91b4190e897b81ed9976dfb39

git.kernel.org/...c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e

git.kernel.org/...c/8bbb9e4e0e66a39282e582d0440724055404b38c

git.kernel.org/...c/4643b91691e969b1b9ad54bf552d7a990cfa3b87

git.kernel.org/...c/e8b9930b0eb045d19e883c65ff9676fc89320c70

git.kernel.org/...c/28c67f0f84f889fe9f4cbda8354132b20dc9212d

git.kernel.org/...c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2

git.kernel.org/...c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda

cve.org (CVE-2024-46677)

nvd.nist.gov (CVE-2024-46677)

Download JSON