inet: read sk->sk_family once in inet_recv_error()
Summary
| CVE | CVE-2024-26679 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-04-02 07:15:44 UTC |
| Updated | 2026-10-15 01:17:22 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and trigger a KCSAN warning. |
Risk And Classification
Primary CVSS: v3.1 5.5 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Problem Types: CWE-667
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 caa064c3c2394d03e289ebd6b0be5102eb8a5b40 git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 5993f121fbc01dc2d734f0ff2628009b258fb1dd git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 88081ba415224cf413101def4343d660f56d082b git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 3266e638ba5cc1165f5e6989eb8c0720f1cc4b41 git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 54538752216bf89ee88d47ad07802063a498c299 git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 4a5e31bdd3c1702b520506d9cf8c41085f75c7f2 git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 307fa8a75ab7423fa5c73573ec3d192de5027830 git | Not specified |
| CNA | Linux | Linux | affected f4713a3dfad045d46afcb9c2a7d0bba288920ed4 eef00a82c568944f113f2de738156ac591bbd5cd git | Not specified |
| CNA | Linux | Linux | affected 433337f9c00cac447d020922f59237273f5d92be git | Not specified |
| CNA | Linux | Linux | affected 3.17.7 3.18 semver | Not specified |
| CNA | Linux | Linux | affected 3.18 | Not specified |
| CNA | Linux | Linux | unaffected 3.18 semver | Not specified |
| CNA | Linux | Linux | unaffected 4.19.307 4.19.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.4.269 5.4.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.10.210 5.10.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.15.149 5.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.78 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.17 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.7.5 6.7.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.8 * original_commit_for_fix | Not specified |
| ADP | Siemens | RUGGEDCOM RST2428P | unaffected * custom | Not specified |
| ADP | Siemens | SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 Family | unaffected * custom | Not specified |
| ADP | Siemens | SCALANCE XCM-/XRM-/XCH-/XRH-300 Family | unaffected * custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | affected V3.1.0 V3.1.5 custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | affected V3.1.0 V3.1.5 custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | affected V3.1.0 V3.1.5 custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | affected V3.1.0 V3.1.5 custom | Not specified |
| ADP | Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | affected V3.1.0 V3.1.5 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| cert-portal.siemens.com/productcert/html/ssa-398330.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| lists.debian.org/debian-lts-announce/2024/06/msg00017.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | Mailing List |
| git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| cert-portal.siemens.com/productcert/html/ssa-613116.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| lists.debian.org/debian-lts-announce/2024/06/msg00020.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | Mailing List |
| git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 6000567 Debian Security Update for linux (DSA 5658-1)