← CVE Intelligence

CVE-2024-46677

gtp: fix a potential NULL pointer dereference PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.)

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before 620fe9809752fae91b4190e897b81ed9976dfb39; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before 8bbb9e4e0e66a39282e582d0440724055404b38c; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before 4643b91691e969b1b9ad54bf552d7a990cfa3b87; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before e8b9930b0eb045d19e883c65ff9676fc89320c70; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before 28c67f0f84f889fe9f4cbda8354132b20dc9212d; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before 612edd35f2a3910ab1f61c1f2338889d4ba99fa2; affected 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 before defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda
Linux / Linuxaffected 4.12; unaffected 0 before 4.12; unaffected 4.19.321 through 4.19.*; unaffected 5.4.283 through 5.4.*; unaffected 5.10.225 through 5.10.*; unaffected 5.15.166 through 5.15.*; unaffected 6.1.108 through 6.1.*; unaffected 6.6.49 through 6.6.*; unaffected 6.10.8 through 6.10.*; unaffected 6.11 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.