01 Record

CVE-2024-38612

ipv6: sr: fix invalid unregister error path

HighPUBLISHEDCNA: Linux

CNA base score7.0 CVSS v3.xCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ipv6: sr: fix invalid unregister error path

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.66% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 51.0% of scored records. A rank, not a probability.

NVD base score

7.0 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-10-15.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-06-19 13:56Z2 YR AGO

Last updated

2026-10-15 00:43Z14 DAYS AGO

Reserved

2024-06-18

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.0)

CNA CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant
CWE-476NULL Pointer DereferenceBase
CWE-459Incomplete CleanupBase

Data version

5.2

Document digest

70761519d5f05c5d75093e1cddfcca6166799cb0e4d8960d1f2bf48308c3c10d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux46738b1317e169b281ad74690276916e24d1be6d to < 10610575a3ac2a702bf5c57aa931beaf847949c7, 46738b1317e169b281ad74690276916e24d1be6d to < 646cd236c55e2cb5f146fc41bbe4034c4af5b2a4, 46738b1317e169b281ad74690276916e24d1be6d to < 00e6335329f23ac6cf3105931691674e28bc598c, 46738b1317e169b281ad74690276916e24d1be6d to < 1a63730fb315bb1bab97edd69ff58ad45e04bb01, 46738b1317e169b281ad74690276916e24d1be6d to < e77a3ec7ada84543e75722a1283785a6544de925, 46738b1317e169b281ad74690276916e24d1be6d to < 3398a40dccb88d3a7eef378247a023a78472db66, 46738b1317e169b281ad74690276916e24d1be6d to < 85a70ff1e572160f1eeb096ed48d09a1c9d4d89a, 46738b1317e169b281ad74690276916e24d1be6d to < c04d6a914e890ccea4a9d11233009a2ee7978bf4, 46738b1317e169b281ad74690276916e24d1be6d to < 160e9d2752181fcf18c662e74022d77d3164cd45, 4.10—

linuxlinux_kernel46738b1317e1 to < 0610575a3ac, 46738b1317e1 to < 646cd236c55e, 46738b1317e1 to < 00e6335329f2, 46738b1317e1 to < 1a63730fb315, 46738b1317e1 to < e77a3ec7ada8, 46738b1317e1 to < 3398a40dccb8, 46738b1317e1 to < 85a70ff1e572, 46738b1317e1 to < c04d6a914e89, 46738b1317e1 to < 160e9d275218, 4.10—

linuxacrnNot specified—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/10610575a3ac2a702bf5c57aa931beaf847949c7
git.kernel.orghttps://git.kernel.org/stable/c/646cd236c55e2cb5f146fc41bbe4034c4af5b2a4
git.kernel.orghttps://git.kernel.org/stable/c/00e6335329f23ac6cf3105931691674e28bc598c
git.kernel.orghttps://git.kernel.org/stable/c/1a63730fb315bb1bab97edd69ff58ad45e04bb01
git.kernel.orghttps://git.kernel.org/stable/c/e77a3ec7ada84543e75722a1283785a6544de925
git.kernel.orghttps://git.kernel.org/stable/c/3398a40dccb88d3a7eef378247a023a78472db66
git.kernel.orghttps://git.kernel.org/stable/c/85a70ff1e572160f1eeb096ed48d09a1c9d4d89a
git.kernel.orghttps://git.kernel.org/stable/c/c04d6a914e890ccea4a9d11233009a2ee7978bf4
git.kernel.orghttps://git.kernel.org/stable/c/160e9d2752181fcf18c662e74022d77d3164cd45
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-613116.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.8.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.8.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.