Vulnerability Database

319,195

Total vulnerabilities in the database

CVE-2024-36017

In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation

Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.

  • Published: May 30, 2024
  • Updated: Dec 18, 2025
  • CVE: CVE-2024-36017
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

No CWE or OWASP classifications available.

Software From Fixed in
linux / linux_kernel 4.9 4.19.314
linux / linux_kernel 4.20 5.4.276
linux / linux_kernel 5.5 5.10.217
linux / linux_kernel 5.11 5.15.159
linux / linux_kernel 5.16 6.1.91
linux / linux_kernel 6.2 6.6.31
linux / linux_kernel 6.7 6.8.10
linux / linux_kernel 6.9-rc1 6.9-rc1.x
linux / linux_kernel 6.9-rc2 6.9-rc2.x
linux / linux_kernel 6.9-rc3 6.9-rc3.x
linux / linux_kernel 6.9-rc4 6.9-rc4.x
linux / linux_kernel 6.9-rc5 6.9-rc5.x
linux / linux_kernel 6.9-rc6 6.9-rc6.x
linux / linux_kernel 6.9-rc7 6.9-rc7.x
debian / debian_linux 10.0 10.0.x