CVE-2024-44985

CriticalCVSS 9.8

Published: 04/09/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

A possible use-after-free in ip6_xmit() in the Linux kernel was found. If skb_expand_head() returns NULL, the skb and associated dst/idev may be freed, and further access can lead to a crash.

Risk Assessment

An attacker can cause system crashes or potential code execution by exploiting this vulnerability in the IPv6 stack.

Recommendation

Install a Linux kernel update containing the fix that uses rcu_read_lock() to prevent UAF.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb has been freed and the associated dst/idev could also have been freed. We must use rcu_read_lock() to prevent a possible UAF.