PT-2024-21533

CVE-2024-26855

·

Published

2024-03-05

·

Updated

2026-10-21

Description by

CVSS 4.0
6.7
Medium
MetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a potential NULL pointer dereference in the ice bridge setlink() function. This can occur if nlmsg find attr() returns NULL and br spec is subsequently dereferenced in nla for each nested(). To address this, a check is added to ensure br spec is not NULL before proceeding with the nested attribute iteration.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2024:5928
ALSA-2024:7000
ALSA-2024:7001
ALSA-2025_16880
CESA-2024_7000
CESA-2024_7001
CLSA-2024-1727815919
CLSA-2025-1742322442
DLA-3842-1
DSA-5681-1
INFSA-2024_5928
INFSA-2024_7000
INFSA-2024_7001
OESA-2024-1619
OESA-2024-1620
OESA-2024-1621
OESA-2024-1622
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
RHSA-2024:5364
RHSA-2024:5365
RHSA-2024:5928
RHSA-2024_5928
RHSA-2024:7000
RHSA-2024_7000
RHSA-2024:7001
RHSA-2024_7001
RLSA-2024:7001
SUSE-SU-2024:1643-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1646-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
SUSE-SU-2024:1870-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20249-1
USN-6820-1
USN-6820-2
USN-6821-1
USN-6821-2
USN-6821-3
USN-6821-4
USN-6828-1
USN-6871-1
USN-6892-1
USN-6896-1
USN-6896-2
USN-6896-3
USN-6896-4
USN-6896-5
USN-6919-1
Found an issue in the description? Have something to add? Feel free to write us 👾