Security tracker / CVE-2024-50256

CVE-2024-50256

netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in c8d7b98bec43 ("netfilter: move nf_send_resetX() code to
 carnil> nf_reject_ipvX modules"). Vulnerable versions: 3.18-rc1.

Bugs

Status

Branch	Status
upstream	released (6.12-rc6) [4ed234fe793f27a3b151c43d2106df2ff0d81aac]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.11-upstream-stable	released (6.11.7) [f85b057e34419e5ec0583a65078a11ccc1d4540a]
6.6-upstream-stable	released (6.6.60) [fef63832317d9d24e1214cdd8f204d02ebdf8499]
6.1-upstream-stable	released (6.1.116) [4f7b586aae53c2ed820661803da8ce18b1361921]
5.10-upstream-stable	needed
sid	released (6.11.7-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.119-1)
5.10-bullseye-security	needed