Vulnerability Database

320,116

Total vulnerabilities in the database

CVE-2024-27417

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

It seems that if userspace provides a correct IFA_TARGET_NETNSID value but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr() returns -EINVAL with an elevated "struct net" refcount.

  • Published: May 17, 2024
  • Updated: Dec 24, 2025
  • CVE: CVE-2024-27417
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 4.20 5.4.271
linux / linux_kernel 5.5 5.10.212
linux / linux_kernel 5.11 5.15.151
linux / linux_kernel 5.16 6.1.81
linux / linux_kernel 6.2 6.6.21
linux / linux_kernel 6.7 6.7.9
linux / linux_kernel 6.8-rc1 6.8-rc1.x
linux / linux_kernel 6.8-rc2 6.8-rc2.x
linux / linux_kernel 6.8-rc3 6.8-rc3.x
linux / linux_kernel 6.8-rc4 6.8-rc4.x
linux / linux_kernel 6.8-rc5 6.8-rc5.x
linux / linux_kernel 6.8-rc6 6.8-rc6.x
debian / debian_linux 10.0 10.0.x