Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-47685
CVE-2024-47685:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2024-47685 affects the Linux kernel's netfilter IPv6 functionality. The vulnerability was discovered when syzbot reported that nfrejectip6tcphdrput() was possibly sending garbage on the four reserved TCP bits (th->res1). This issue affects Linux kernel versions from 3.18 up to (excluding) 6.6.54 (NVD).
Technical details
The vulnerability exists in the nfrejectip6tcphdrput() function within the netfilter IPv6 implementation. The issue occurs because the function uses skbput() instead of skbput_zero() when allocating TCP header memory, potentially leaving uninitialized memory in the reserved TCP header bits. The CVSS v3.1 base score is 9.1 CRITICAL with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H (NVD, Kernel Patch).
Impact
The vulnerability could lead to information disclosure as uninitialized kernel memory might be exposed through the TCP header's reserved bits. This could potentially reveal sensitive kernel information to remote attackers (NVD).
Mitigation and workarounds
The issue has been fixed by replacing skbput() with skbput_zero() to properly clear the whole TCP header. Users should update their Linux kernel to versions that include the fix. The patch has been backported to multiple stable kernel versions (Kernel Patch).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management