CVE-2024-26663

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the tipc component in the Linux kernel. When the tipc nl bearer add() function is called with the TIPC NLA BEARER UDP OPTS attribute, tipc udp nl bearer add() is called even if the bearer is not UDP. The tipc udp is known peer() function, called by tipc udp nl bearer add(), assumes that the media ptr field of the tipc bearer has a udp bearer type object. If the bearer is not UDP, this assumption leads to incorrect behavior. The patch fixes the issue by checking the bearer type before calling tipc udp nl bearer add() in tipc nl bearer add().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.