GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-36927 (GCVE-0-2024-36927)

Vulnerability from cvelistv5 – Published: 2024-05-30 15:29 – Updated: 2026-09-08 08:39
VLAI
Title
ipv4: Fix uninit-value access in __ip_make_skb()
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1]. __ip_make_skb() tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL while __ip_make_skb() is running, the function will access icmphdr in the skb even if it is not included. This causes the issue reported by KMSAN. Check FLOWI_FLAG_KNOWN_NH on fl4->flowi4_flags instead of testing HDRINCL on the socket. Also, fl4->fl4_icmp_type and fl4->fl4_icmp_code are not initialized. These are union in struct flowi4 and are implicitly initialized by flowi4_init_output(), but we should not rely on specific union layout. Initialize these explicitly in raw_sendmsg(). [1] BUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481 __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481 ip_finish_skb include/net/ip.h:243 [inline] ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508 raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x274/0x3c0 net/socket.c:745 __sys_sendto+0x62c/0x7b0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x130/0x200 net/socket.c:2199 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: slab_post_alloc_hook mm/slub.c:3804 [inline] slab_alloc_node mm/slub.c:3845 [inline] kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888 kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577 __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1318 [inline] __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128 ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365 raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x274/0x3c0 net/socket.c:745 __sys_sendto+0x62c/0x7b0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x130/0x200 net/socket.c:2199 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 CPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-30 18:44 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 566785731c6dd41ef815196ddc36d1ae30a63763 , < 88c66f1879f322f11de34d37b2d3d87497afdcb6 (git)
Affected: a54ec573d9b81b05d368f8e6edc1b3e49f688658 , < 20d3eb00ab81462d554ac6d09691b8d9aa5a5741 (git)
Affected: fc60067260c20da8cddcf968bec47416f3e2cde2 , < 55bf541e018b76b3750cb6c6ea18c46e1ac5562e (git)
Affected: 99e5acae193e369b71217efe6f1dad42f3f18815 , < 5db08343ddb1b239320612036c398e4e1bb52818 (git)
Affected: 99e5acae193e369b71217efe6f1dad42f3f18815 , < f5c603ad4e6fcf42f84053e882ebe20184bb309e (git)
Affected: 99e5acae193e369b71217efe6f1dad42f3f18815 , < fc1092f51567277509563800a3c56732070b6aa4 (git)
Affected: dc4e3bb0710178c8d03fc43064e0a71fe7440cdd (git)
Affected: 022ea4374c319690c804706bda9dc42946d1556d (git)
Affected: 27c468ec1af113f6ae94fb5378f65e6038bd16e7 (git)
Affected: 32a5a13d556e4f804e5a447a08c70b172d600707 (git)
Affected: 9e3c96aed8fe32907e0a4bca05aad457629a820c (git)
Affected: 5.10.180 , < 5.10.248 (semver)
Affected: 5.15.111 , < 5.15.198 (semver)
Affected: 6.1.28 , < 6.1.140 (semver)
Affected: 4.14.315 , < 4.15 (semver)
Affected: 4.19.283 , < 4.20 (semver)
Affected: 5.4.243 , < 5.5 (semver)
Affected: 6.2.15 , < 6.3 (semver)
Affected: 6.3.2 , < 6.4 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.4
Unaffected: 0 , < 6.4 (semver)
Unaffected: 5.10.248 , ≤ 5.10.* (semver)
Unaffected: 5.15.198 , ≤ 5.15.* (semver)
Unaffected: 6.1.140 , ≤ 6.1.* (semver)
Unaffected: 6.6.31 , ≤ 6.6.* (semver)
Unaffected: 6.8.10 , ≤ 6.8.* (semver)
Unaffected: 6.9 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP Affected: V3.1.6 , < * (custom)
guessed Create a notification for this product.
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP Affected: V3.1.6 , < * (custom)
guessed Create a notification for this product.
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Affected: V3.1.6 , < * (custom)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-36927",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-30T18:44:15.154993Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:47:46.460Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:30:11.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:39:02.680Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/ip_output.c",
            "net/ipv4/raw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "88c66f1879f322f11de34d37b2d3d87497afdcb6",
              "status": "affected",
              "version": "566785731c6dd41ef815196ddc36d1ae30a63763",
              "versionType": "git"
            },
            {
              "lessThan": "20d3eb00ab81462d554ac6d09691b8d9aa5a5741",
              "status": "affected",
              "version": "a54ec573d9b81b05d368f8e6edc1b3e49f688658",
              "versionType": "git"
            },
            {
              "lessThan": "55bf541e018b76b3750cb6c6ea18c46e1ac5562e",
              "status": "affected",
              "version": "fc60067260c20da8cddcf968bec47416f3e2cde2",
              "versionType": "git"
            },
            {
              "lessThan": "5db08343ddb1b239320612036c398e4e1bb52818",
              "status": "affected",
              "version": "99e5acae193e369b71217efe6f1dad42f3f18815",
              "versionType": "git"
            },
            {
              "lessThan": "f5c603ad4e6fcf42f84053e882ebe20184bb309e",
              "status": "affected",
              "version": "99e5acae193e369b71217efe6f1dad42f3f18815",
              "versionType": "git"
            },
            {
              "lessThan": "fc1092f51567277509563800a3c56732070b6aa4",
              "status": "affected",
              "version": "99e5acae193e369b71217efe6f1dad42f3f18815",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dc4e3bb0710178c8d03fc43064e0a71fe7440cdd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "022ea4374c319690c804706bda9dc42946d1556d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "27c468ec1af113f6ae94fb5378f65e6038bd16e7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "32a5a13d556e4f804e5a447a08c70b172d600707",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9e3c96aed8fe32907e0a4bca05aad457629a820c",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.248",
              "status": "affected",
              "version": "5.10.180",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.198",
              "status": "affected",
              "version": "5.15.111",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.140",
              "status": "affected",
              "version": "6.1.28",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.315",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.283",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.243",
              "versionType": "semver"
            },
            {
              "lessThan": "6.3",
              "status": "affected",
              "version": "6.2.15",
              "versionType": "semver"
            },
            {
              "lessThan": "6.4",
              "status": "affected",
              "version": "6.3.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/ip_output.c",
            "net/ipv4/raw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "lessThan": "6.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.248",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.31",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.248",
                  "versionStartIncluding": "5.10.180",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.198",
                  "versionStartIncluding": "5.15.111",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.140",
                  "versionStartIncluding": "6.1.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.31",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.10",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.315",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.283",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.243",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.2.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.3.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: Fix uninit-value access in __ip_make_skb()\n\nKMSAN reported uninit-value access in __ip_make_skb() [1].  __ip_make_skb()\ntests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a\nrace condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL\nwhile __ip_make_skb() is running, the function will access icmphdr in the\nskb even if it is not included. This causes the issue reported by KMSAN.\n\nCheck FLOWI_FLAG_KNOWN_NH on fl4-\u003eflowi4_flags instead of testing HDRINCL\non the socket.\n\nAlso, fl4-\u003efl4_icmp_type and fl4-\u003efl4_icmp_code are not initialized. These\nare union in struct flowi4 and are implicitly initialized by\nflowi4_init_output(), but we should not rely on specific union layout.\n\nInitialize these explicitly in raw_sendmsg().\n\n[1]\nBUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\n __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\n ip_finish_skb include/net/ip.h:243 [inline]\n ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508\n raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:3804 [inline]\n slab_alloc_node mm/slub.c:3845 [inline]\n kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888\n kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577\n __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668\n alloc_skb include/linux/skbuff.h:1318 [inline]\n __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128\n ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365\n raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nCPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:47:26.806Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/88c66f1879f322f11de34d37b2d3d87497afdcb6"
        },
        {
          "url": "https://git.kernel.org/stable/c/20d3eb00ab81462d554ac6d09691b8d9aa5a5741"
        },
        {
          "url": "https://git.kernel.org/stable/c/55bf541e018b76b3750cb6c6ea18c46e1ac5562e"
        },
        {
          "url": "https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818"
        },
        {
          "url": "https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4"
        }
      ],
      "title": "ipv4: Fix uninit-value access in __ip_make_skb()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-36927",
    "datePublished": "2024-05-30T15:29:20.275Z",
    "dateReserved": "2024-05-30T15:25:07.069Z",
    "dateUpdated": "2026-09-08T08:39:02.680Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-36927",
      "date": "2026-09-16",
      "epss": "0.0017",
      "percentile": "0.06658"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv4: Fix uninit-value access in __ip_make_skb()\\n\\nKMSAN reported uninit-value access in __ip_make_skb() [1].  __ip_make_skb()\\ntests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a\\nrace condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL\\nwhile __ip_make_skb() is running, the function will access icmphdr in the\\nskb even if it is not included. This causes the issue reported by KMSAN.\\n\\nCheck FLOWI_FLAG_KNOWN_NH on fl4-\u003eflowi4_flags instead of testing HDRINCL\\non the socket.\\n\\nAlso, fl4-\u003efl4_icmp_type and fl4-\u003efl4_icmp_code are not initialized. These\\nare union in struct flowi4 and are implicitly initialized by\\nflowi4_init_output(), but we should not rely on specific union layout.\\n\\nInitialize these explicitly in raw_sendmsg().\\n\\n[1]\\nBUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\\n __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\\n ip_finish_skb include/net/ip.h:243 [inline]\\n ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508\\n raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654\\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\\n __do_sys_sendto net/socket.c:2203 [inline]\\n __se_sys_sendto net/socket.c:2199 [inline]\\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\\n\\nUninit was created at:\\n slab_post_alloc_hook mm/slub.c:3804 [inline]\\n slab_alloc_node mm/slub.c:3845 [inline]\\n kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888\\n kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577\\n __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668\\n alloc_skb include/linux/skbuff.h:1318 [inline]\\n __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128\\n ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365\\n raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648\\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\\n __do_sys_sendto net/socket.c:2203 [inline]\\n __se_sys_sendto net/socket.c:2199 [inline]\\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\\n\\nCPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: ipv4: corrigi\\u00f3 el acceso de valor uninit en __ip_make_skb() KMSAN inform\\u00f3 el acceso de valor uninit en __ip_make_skb() [1]. __ip_make_skb() prueba HDRINCL para saber si el skb tiene icmphdr. Sin embargo, HDRINCL puede provocar una condici\\u00f3n de ejecuci\\u00f3n. Si llamar a setsockopt(2) con IP_HDRINCL cambia HDRINCL mientras se ejecuta __ip_make_skb(), la funci\\u00f3n acceder\\u00e1 a icmphdr en el skb incluso si no est\\u00e1 incluido. Esto provoca el problema informado por KMSAN. Verifique FLOWI_FLAG_KNOWN_NH en fl4-\u0026gt;flowi4_flags en lugar de probar HDRINCL en el socket. Adem\\u00e1s, fl4-\u0026gt;fl4_icmp_type y fl4-\u0026gt;fl4_icmp_code no est\\u00e1n inicializados. Estas son una uni\\u00f3n en la estructura flowi4 y se inicializan impl\\u00edcitamente mediante flowi4_init_output(), pero no debemos confiar en un dise\\u00f1o de uni\\u00f3n espec\\u00edfico. Inicial\\u00edcelos expl\\u00edcitamente en raw_sendmsg(). [1] ERROR: KMSAN: valor uninit en __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481 __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481 ip_finish_skb include/net/ip.h:243 [ inline] ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508 raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851 net/socket.c : 730 [en l\\u00ednea] __sock_sendmsg+0x274/0x3c0 net/Socket.c: 745 __sys_sendto+0x62c/0x7b0 net/Socket.c: 2191 __do_sys_sendto net/socket.c: 2203 [en l\\u00ednea] __se_sys_sendto net/sows. ] __x64_sys_sendto+0x130/0x200 net/socket.c:2199 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit se cre\\u00f3 en: slab_post_alloc_hook mm/slub.c :3804 [en l\\u00ednea] slab_alloc_node mm/slub.c:3845 [en l\\u00ednea] kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888 kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577 __alloc_skb+0x35a/0x7c0 net/core/skbuff.c: 668 alloc_skb include/linux/skbuff.h:1318 [en l\\u00ednea] __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128 ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365 raw_sendmsg+0x22b1/0x2690 net /ipv4 /raw.c:648 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:730 [en l\\u00ednea] __sock_sendmsg+0x274/0x3c0 net/socket.c:745 __sys_sendto+0x62c/0x7b0 net / socket.c:2191 __do_sys_sendto net/socket.c:2203 [en l\\u00ednea] __se_sys_sendto net/socket.c:2199 [en l\\u00ednea] __x64_sys_sendto+0x130/0x200 net/socket.c:2199 do_syscall_64+0xd8/0x1f0 arch/x86/ent ry/ common.c:83 Entry_SYSCALL_64_after_hwframe+0x6d/0x75 CPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25 Nombre de hardware: PC est\\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16 .3-1.fc39 01/04/2014\"}]",
      "id": "CVE-2024-36927",
      "lastModified": "2024-11-21T09:22:50.220",
      "published": "2024-05-30T16:15:15.957",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-36927\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-30T16:15:15.957\",\"lastModified\":\"2026-07-14T13:17:08.693\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv4: Fix uninit-value access in __ip_make_skb()\\n\\nKMSAN reported uninit-value access in __ip_make_skb() [1].  __ip_make_skb()\\ntests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a\\nrace condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL\\nwhile __ip_make_skb() is running, the function will access icmphdr in the\\nskb even if it is not included. This causes the issue reported by KMSAN.\\n\\nCheck FLOWI_FLAG_KNOWN_NH on fl4-\u003eflowi4_flags instead of testing HDRINCL\\non the socket.\\n\\nAlso, fl4-\u003efl4_icmp_type and fl4-\u003efl4_icmp_code are not initialized. These\\nare union in struct flowi4 and are implicitly initialized by\\nflowi4_init_output(), but we should not rely on specific union layout.\\n\\nInitialize these explicitly in raw_sendmsg().\\n\\n[1]\\nBUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\\n __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\\n ip_finish_skb include/net/ip.h:243 [inline]\\n ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508\\n raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654\\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\\n __do_sys_sendto net/socket.c:2203 [inline]\\n __se_sys_sendto net/socket.c:2199 [inline]\\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\\n\\nUninit was created at:\\n slab_post_alloc_hook mm/slub.c:3804 [inline]\\n slab_alloc_node mm/slub.c:3845 [inline]\\n kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888\\n kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577\\n __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668\\n alloc_skb include/linux/skbuff.h:1318 [inline]\\n __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128\\n ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365\\n raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648\\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\\n __do_sys_sendto net/socket.c:2203 [inline]\\n __se_sys_sendto net/socket.c:2199 [inline]\\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\\n\\nCPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ipv4: corrigi\u00f3 el acceso de valor uninit en __ip_make_skb() KMSAN inform\u00f3 el acceso de valor uninit en __ip_make_skb() [1]. __ip_make_skb() prueba HDRINCL para saber si el skb tiene icmphdr. Sin embargo, HDRINCL puede provocar una condici\u00f3n de ejecuci\u00f3n. Si llamar a setsockopt(2) con IP_HDRINCL cambia HDRINCL mientras se ejecuta __ip_make_skb(), la funci\u00f3n acceder\u00e1 a icmphdr en el skb incluso si no est\u00e1 incluido. Esto provoca el problema informado por KMSAN. Verifique FLOWI_FLAG_KNOWN_NH en fl4-\u0026gt;flowi4_flags en lugar de probar HDRINCL en el socket. Adem\u00e1s, fl4-\u0026gt;fl4_icmp_type y fl4-\u0026gt;fl4_icmp_code no est\u00e1n inicializados. Estas son una uni\u00f3n en la estructura flowi4 y se inicializan impl\u00edcitamente mediante flowi4_init_output(), pero no debemos confiar en un dise\u00f1o de uni\u00f3n espec\u00edfico. Inicial\u00edcelos expl\u00edcitamente en raw_sendmsg(). [1] ERROR: KMSAN: valor uninit en __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481 __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481 ip_finish_skb include/net/ip.h:243 [ inline] ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508 raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851 net/socket.c : 730 [en l\u00ednea] __sock_sendmsg+0x274/0x3c0 net/Socket.c: 745 __sys_sendto+0x62c/0x7b0 net/Socket.c: 2191 __do_sys_sendto net/socket.c: 2203 [en l\u00ednea] __se_sys_sendto net/sows. ] __x64_sys_sendto+0x130/0x200 net/socket.c:2199 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit se cre\u00f3 en: slab_post_alloc_hook mm/slub.c :3804 [en l\u00ednea] slab_alloc_node mm/slub.c:3845 [en l\u00ednea] kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888 kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577 __alloc_skb+0x35a/0x7c0 net/core/skbuff.c: 668 alloc_skb include/linux/skbuff.h:1318 [en l\u00ednea] __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128 ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365 raw_sendmsg+0x22b1/0x2690 net /ipv4 /raw.c:648 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:730 [en l\u00ednea] __sock_sendmsg+0x274/0x3c0 net/socket.c:745 __sys_sendto+0x62c/0x7b0 net / socket.c:2191 __do_sys_sendto net/socket.c:2203 [en l\u00ednea] __se_sys_sendto net/socket.c:2199 [en l\u00ednea] __x64_sys_sendto+0x130/0x200 net/socket.c:2199 do_syscall_64+0xd8/0x1f0 arch/x86/ent ry/ common.c:83 Entry_SYSCALL_64_after_hwframe+0x6d/0x75 CPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25 Nombre de hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16 .3-1.fc39 01/04/2014\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv4/ip_output.c\",\"net/ipv4/raw.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"566785731c6dd41ef815196ddc36d1ae30a63763\",\"lessThan\":\"88c66f1879f322f11de34d37b2d3d87497afdcb6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a54ec573d9b81b05d368f8e6edc1b3e49f688658\",\"lessThan\":\"20d3eb00ab81462d554ac6d09691b8d9aa5a5741\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fc60067260c20da8cddcf968bec47416f3e2cde2\",\"lessThan\":\"55bf541e018b76b3750cb6c6ea18c46e1ac5562e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"99e5acae193e369b71217efe6f1dad42f3f18815\",\"lessThan\":\"5db08343ddb1b239320612036c398e4e1bb52818\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"99e5acae193e369b71217efe6f1dad42f3f18815\",\"lessThan\":\"f5c603ad4e6fcf42f84053e882ebe20184bb309e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"99e5acae193e369b71217efe6f1dad42f3f18815\",\"lessThan\":\"fc1092f51567277509563800a3c56732070b6aa4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"dc4e3bb0710178c8d03fc43064e0a71fe7440cdd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"022ea4374c319690c804706bda9dc42946d1556d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"27c468ec1af113f6ae94fb5378f65e6038bd16e7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"32a5a13d556e4f804e5a447a08c70b172d600707\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9e3c96aed8fe32907e0a4bca05aad457629a820c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.180\",\"lessThan\":\"5.10.248\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.111\",\"lessThan\":\"5.15.198\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.28\",\"lessThan\":\"6.1.140\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.315\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.283\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.243\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.15\",\"lessThan\":\"6.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.3.2\",\"lessThan\":\"6.4\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv4/ip_output.c\",\"net/ipv4/raw.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.248\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.198\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.140\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.31\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8.10\",\"lessThanOrEqual\":\"6.8.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":4.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-30T18:44:15.154993Z\",\"id\":\"CVE-2024-36927\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"},{\"lang\":\"en\",\"value\":\"CWE-908\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14.315\",\"versionEndExcluding\":\"4.15\",\"matchCriteriaId\":\"1111243A-400E-4A73-B5EA-0042BC430A49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.283\",\"versionEndExcluding\":\"4.20\",\"matchCriteriaId\":\"F6F05B8A-87E9-4349-B071-9F1FBB5C4D70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.243\",\"versionEndExcluding\":\"5.5\",\"matchCriteriaId\":\"EEF2D40F-A6B5-43CB-8D3A-366DEC205D7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.180\",\"versionEndExcluding\":\"5.11\",\"matchCriteriaId\":\"E7545FEB-B9DA-45FF-9B1B-514BDBF5DB3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.111\",\"versionEndExcluding\":\"5.16\",\"matchCriteriaId\":\"2D62CC1B-1C49-4746-82B9-74F3B2FE7C3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.28\",\"versionEndExcluding\":\"6.2\",\"matchCriteriaId\":\"2172B100-DBCE-4EA0-B629-472FB9E924F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.15\",\"versionEndExcluding\":\"6.3\",\"matchCriteriaId\":\"70B668F1-1B39-45E1-ADAC-438F51BF80D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.3.2\",\"versionEndExcluding\":\"6.6.31\",\"matchCriteriaId\":\"83047EA1-FC77-4934-819C-DC64A0C42878\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.8.10\",\"matchCriteriaId\":\"6A6B920C-8D8F-4130-86B4-AD334F4CF2E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"22BEDD49-2C6D-402D-9DBF-6646F6ECD10B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"52048DDA-FC5A-4363-95A0-A6357B4D7F8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A06B2CCF-3F43-4FA9-8773-C83C3F5764B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"F850DCEC-E08B-4317-A33B-D2DCF39F601B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"91326417-E981-482E-A5A3-28BC1327521B\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/20d3eb00ab81462d554ac6d09691b8d9aa5a5741\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/55bf541e018b76b3750cb6c6ea18c46e1ac5562e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/88c66f1879f322f11de34d37b2d3d87497afdcb6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-28T10:59:27+00:00",
      "cve": "CVE-2024-36927",
      "id": "CVE-2024-36927",
      "initial_release_date": "2024-05-30T00:00:00+00:00",
      "product_status:fixed": "709",
      "product_status:known_affected": "64",
      "product_status:known_not_affected": "8",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ipv4: Fix uninit-value access in __ip_make_skb()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-36927.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T02:15:42Z",
      "cve": "CVE-2024-36927",
      "id": "CVE-2024-36927",
      "initial_release_date": "2024-06-04T02:25:37Z",
      "product_status:known_affected": "411",
      "product_status:known_not_affected": "451",
      "product_status:recommended": "300",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-36927",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-36927.json",
      "version": "82"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T19:30:11.988Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-09-08T08:39:02.680Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-36927\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-30T18:44:15.154993Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-30T18:44:35.278Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"ipv4: Fix uninit-value access in __ip_make_skb()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"566785731c6dd41ef815196ddc36d1ae30a63763\", \"lessThan\": \"88c66f1879f322f11de34d37b2d3d87497afdcb6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a54ec573d9b81b05d368f8e6edc1b3e49f688658\", \"lessThan\": \"20d3eb00ab81462d554ac6d09691b8d9aa5a5741\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"fc60067260c20da8cddcf968bec47416f3e2cde2\", \"lessThan\": \"55bf541e018b76b3750cb6c6ea18c46e1ac5562e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"99e5acae193e369b71217efe6f1dad42f3f18815\", \"lessThan\": \"5db08343ddb1b239320612036c398e4e1bb52818\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"99e5acae193e369b71217efe6f1dad42f3f18815\", \"lessThan\": \"f5c603ad4e6fcf42f84053e882ebe20184bb309e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"99e5acae193e369b71217efe6f1dad42f3f18815\", \"lessThan\": \"fc1092f51567277509563800a3c56732070b6aa4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"dc4e3bb0710178c8d03fc43064e0a71fe7440cdd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"022ea4374c319690c804706bda9dc42946d1556d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"27c468ec1af113f6ae94fb5378f65e6038bd16e7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"32a5a13d556e4f804e5a447a08c70b172d600707\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9e3c96aed8fe32907e0a4bca05aad457629a820c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5.10.180\", \"lessThan\": \"5.10.248\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.15.111\", \"lessThan\": \"5.15.198\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.1.28\", \"lessThan\": \"6.1.140\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.14.315\", \"lessThan\": \"4.15\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.19.283\", \"lessThan\": \"4.20\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.4.243\", \"lessThan\": \"5.5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.2.15\", \"lessThan\": \"6.3\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.3.2\", \"lessThan\": \"6.4\", \"versionType\": \"semver\"}], \"programFiles\": [\"net/ipv4/ip_output.c\", \"net/ipv4/raw.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.4\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.4\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.248\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.198\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.140\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.31\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/ipv4/ip_output.c\", \"net/ipv4/raw.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/88c66f1879f322f11de34d37b2d3d87497afdcb6\"}, {\"url\": \"https://git.kernel.org/stable/c/20d3eb00ab81462d554ac6d09691b8d9aa5a5741\"}, {\"url\": \"https://git.kernel.org/stable/c/55bf541e018b76b3750cb6c6ea18c46e1ac5562e\"}, {\"url\": \"https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818\"}, {\"url\": \"https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e\"}, {\"url\": \"https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv4: Fix uninit-value access in __ip_make_skb()\\n\\nKMSAN reported uninit-value access in __ip_make_skb() [1].  __ip_make_skb()\\ntests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a\\nrace condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL\\nwhile __ip_make_skb() is running, the function will access icmphdr in the\\nskb even if it is not included. This causes the issue reported by KMSAN.\\n\\nCheck FLOWI_FLAG_KNOWN_NH on fl4-\u003eflowi4_flags instead of testing HDRINCL\\non the socket.\\n\\nAlso, fl4-\u003efl4_icmp_type and fl4-\u003efl4_icmp_code are not initialized. These\\nare union in struct flowi4 and are implicitly initialized by\\nflowi4_init_output(), but we should not rely on specific union layout.\\n\\nInitialize these explicitly in raw_sendmsg().\\n\\n[1]\\nBUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\\n __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481\\n ip_finish_skb include/net/ip.h:243 [inline]\\n ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508\\n raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654\\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\\n __do_sys_sendto net/socket.c:2203 [inline]\\n __se_sys_sendto net/socket.c:2199 [inline]\\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\\n\\nUninit was created at:\\n slab_post_alloc_hook mm/slub.c:3804 [inline]\\n slab_alloc_node mm/slub.c:3845 [inline]\\n kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888\\n kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577\\n __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668\\n alloc_skb include/linux/skbuff.h:1318 [inline]\\n __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128\\n ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365\\n raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648\\n inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x274/0x3c0 net/socket.c:745\\n __sys_sendto+0x62c/0x7b0 net/socket.c:2191\\n __do_sys_sendto net/socket.c:2203 [inline]\\n __se_sys_sendto net/socket.c:2199 [inline]\\n __x64_sys_sendto+0x130/0x200 net/socket.c:2199\\n do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\\n\\nCPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.248\", \"versionStartIncluding\": \"5.10.180\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.198\", \"versionStartIncluding\": \"5.15.111\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.140\", \"versionStartIncluding\": \"6.1.28\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.31\", \"versionStartIncluding\": \"6.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.10\", \"versionStartIncluding\": \"6.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"6.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.14.315\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.19.283\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.4.243\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"6.2.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"6.3.2\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:47:26.806Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-36927\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-08T08:39:02.680Z\", \"dateReserved\": \"2024-05-30T15:25:07.069Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-30T15:29:20.275Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.