CVE-2024-44985

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a possible use-after-free (UAF) vulnerability in the ip6 xmit() function of the Linux kernel. If skb expand head() returns NULL, it indicates that the skb has been freed, and the associated dst/idev could also have been freed. To prevent a possible UAF, it is necessary to use rcu read lock(). The exploitation of this vulnerability may allow an attacker to cause a denial of service.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider using rcu read lock() to prevent a possible UAF in the ip6 xmit() function until a patch is available.