In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix potential uninit-value access in _ip6make_skb()
As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in _ipmakeskb()") for IPv4, check FLOWIFLAGKNOWNNH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"81598796712767686619679973014898930739",
"165917464453700452482214346746643025184",
"302190006069604630406976000941083148110",
"158778499112995413791926141099303093478"
]
},
"id": "CVE-2024-36903-0421e1ea",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68c8ba16ab712eb709c6bab80ff151079d11d97a",
"target": {
"file": "net/ipv6/ip6_output.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1974.0,
"function_hash": "95458246842809171422201592607763508296"
},
"id": "CVE-2024-36903-05f18add",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a05c1ede50e9656f0752e523c7b54f3a3489e9a8",
"target": {
"file": "net/ipv6/ip6_output.c",
"function": "__ip6_make_skb"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1968.0,
"function_hash": "322380051731246750077884189313795255917"
},
"id": "CVE-2024-36903-7886ba74",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68c8ba16ab712eb709c6bab80ff151079d11d97a",
"target": {
"file": "net/ipv6/ip6_output.c",
"function": "__ip6_make_skb"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324003809294373949921047430067810098896",
"298241997807262332783117546767111126614",
"11969641813064037208813939578194041575",
"30848482067372102113753547107977928888"
]
},
"id": "CVE-2024-36903-af575f38",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a05c1ede50e9656f0752e523c7b54f3a3489e9a8",
"target": {
"file": "net/ipv6/ip6_output.c"
}
}
]