CVE-2024-36902

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description The issue is related to a possible NULL dereference in the fib6 rule action() function, which can be triggered by unsafe ip6 dst idev() use. This can cause a general protection fault and potentially lead to a denial-of-service condition. The vulnerability is exploitable remotely.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.37 or later. This update includes fixes for the vulnerability, ensuring that ip6 dst idev() is properly checked to avoid NULL dereferences.