Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-44985

21
FAUCET Score

CVE-2024-44985 is a use-after-free (UAF) vulnerability in the Linux kernel's IPv6 networking stack, specifically within the ip6_xmit() function, affecting Linux kernel versions. This flaw, rated High severity with a CVSS score of 7.8, could allow a local attacker with low privileges to achieve high impact on confidentiality, integrity, and availability. The vulnerability arises when skb_expand_head() fails, potentially freeing associated network resources prematurely. Currently, there is no public exploit code available, nor is there evidence of active exploitation, and it has received minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.15, < 5.15.166CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.107CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.48CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.10.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.11CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.25%
Probability of exploitation in next 30 days
EPSS Percentile
16.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0025 is in the 51st percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (17)

codesyspatch availablevia llm_extracted
View patch
esphomepatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17250-17086Fixed in: 5.15.167.1-1
microsoftpatch availablevia msrc
Product: 19670-17086Fixed in: 5.15.167.1-1
microsoftpatch availablevia msrc
Product: 17631-17084Fixed in: 6.6.51.1-1
microsoftpatch availablevia msrc
Product: 17651-17084Fixed in: 6.6.51.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.47.1-1 on Azure Linux 3.0Fixed in: 6.6.51.1-1
microsoftpatch availablevia msrc
Product: 17207-16823Fixed in: 5.15.167.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0Fixed in: 5.15.167.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.51.1-1 on Azure Linux 3.0Fixed in: 6.6.51.1-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.51.1-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.51.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.15.167.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.15.167.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0Fixed in: 5.15.167.1-1
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel

Vendor Advisories (5)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
microsoft2024-Oct/CVE-2024-44985

CVE-2024-44985

Oct 8, 2024
microsoft2024-Sep/CVE-2024-44985Important

ipv6: prevent possible UAF in ip6_xmit()

Sep 10, 2024
redhatCVE-2024-44985Moderate

kernel: ipv6: prevent possible UAF in ip6_xmit()

Sep 4, 2024

References

git.kernel.org / stable/c/124b428fe28064c809e4237b0b38e97200a8a4a8
Patch
git.kernel.org / stable/c/2d5ff7e339d04622d8282661df36151906d0e1c7
Patch
git.kernel.org / stable/c/38a21c026ed2cc7232414cb166efc1923f34af17
Patch
git.kernel.org / stable/c/975f764e96f71616b530e300c1bb2ac0ce0c2596
Patch
git.kernel.org / stable/c/b3a3d5333c13a1be57499581eab4a8fc94d57f36
git.kernel.org / stable/c/c47e022011719fc5727bca661d662303180535ba
git.kernel.org / stable/c/fc88d6c1f2895a5775795d82ec581afdff7661d1
Patch
lists.debian.org / debian-lts-announce/2025/01/msg00001.html