CVE-2024-36903
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
In the Linux kernel, a vulnerability was found in the __ip6_make_skb() function for IPv6, involving potential uninitialized value access. The issue arises from incorrect checking of the HDRINCL flag on the socket, which can lead to a race condition and reading uninitialized data.
Risk Assessment
An attacker could exploit this vulnerability to obtain information from uninitialized kernel memory, potentially leading to disclosure of sensitive data or system destabilization.
Recommendation
It is recommended to immediately update the Linux kernel to a version containing the fix (reference commit: fc1092f51567 for IPv4, analogous change for IPv6).
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.