CVE-2024-38612
CriticalSummary
A vulnerability has been identified in the Linux kernel related to an incorrect error path in the seg6_init() function when CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In this case, if seg6_hmac_init() fails, the genl_unregister_family() function is not called.
Risk Assessment
The lack of a call to genl_unregister_family() may lead to improper resource management, increasing the risk of system errors and potential attacks.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and ensure proper error handling.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregister_family() isn't called. This issue exist since commit 46738b1317e1 ("ipv6: sr: add option to control lwtunnel support"), and commit 5559cea2d5aa ("ipv6: sr: fix possible use-after-free and null-ptr-deref") replaced unregister_pernet_subsys() with genl_unregister_family() in this error path.