CVE-2024-47707

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description A vulnerability in the Linux kernel has been resolved, which involved a possible NULL dereference in the rt6 uncached list flush dev() function. This issue occurred due to a missing check for rt->rt6i idev being NULL, as spotted by syzbot. The vulnerability could lead to a general protection fault.

Recommendations To resolve this issue, update the Linux kernel to version 6.6.58 or later. As a temporary workaround, consider disabling the rt6 uncached list flush dev() function until a patch is available. However, this is not a recommended long-term solution, as it may affect the functionality of the kernel.