CVE-2024-44985 is a use-after-free (UAF) vulnerability in the Linux kernel's IPv6 networking stack, specifically within the ip6_xmit() function, affecting Linux kernel versions. This flaw, rated High severity with a CVSS score of 7.8, could allow a local attacker with low privileges to achieve high impact on confidentiality, integrity, and availability. The vulnerability arises when skb_expand_head() fails, potentially freeing associated network resources prematurely. Currently, there is no public exploit code available, nor is there evidence of active exploitation, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.15, < 5.15.166CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 6.1.107CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2, < 6.6.48CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.10.7CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.11CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP7 Security Updates
Jun 3, 2025HP ThinPro 8.1 SP7 Security Updates
Jun 3, 2025CVE-2024-44985
Oct 8, 2024ipv6: prevent possible UAF in ip6_xmit()
Sep 10, 2024kernel: ipv6: prevent possible UAF in ip6_xmit()
Sep 4, 2024