Vulnerability identifier: #VU98980

Vulnerability risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-47684

CWE-ID: CWE-476

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the include/net/tcp.h. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
http://git.kernel.org/stable/c/ec31cf42fc4e35bb1248ce6eb1de6de9f851ac86
http://git.kernel.org/stable/c/5c4c03288a4aea705e36aa44119c13d7ee4dce99
http://git.kernel.org/stable/c/96c4983eab2a5da235f7fff90beaf17b008ba029
http://git.kernel.org/stable/c/570f7d8c9bf14f041152ba8353d4330ef7575915
http://git.kernel.org/stable/c/81d18c152e3f82bacadf83bc0a471b2363b9cc18
http://git.kernel.org/stable/c/09aea49fbc7e755a915c405644f347137cdb62b0
http://git.kernel.org/stable/c/c8770db2d54437a5f49417ae7b46f7de23d14db6

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.