#VU98952 NULL pointer dereference in Linux kernel - CVE-2024-49949

Vulnerability identifier: #VU98952

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49949

CWE-ID: CWE-476

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the qdisc_pkt_len_init() function in net/core/dev.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/ba26060a29d3ca1bfc737aa79f7125128f35147c
https://git.kernel.org/stable/c/939c88cbdc668dadd8cfa7a35d9066331239041c
https://git.kernel.org/stable/c/d6114993e0a89fde84a60a60a8329a571580b174
https://git.kernel.org/stable/c/25ab0b87dbd89cecef8a9c60a02bb97832e471d1
https://git.kernel.org/stable/c/f959cce8a2a04ce776aa8b78e83ce339e0d7fbac
https://git.kernel.org/stable/c/81fd007dcd47c34471766249853e4d4bce8eea4b
https://git.kernel.org/stable/c/c20029db28399ecc50e556964eaba75c43b1e2f1

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.