NVD Vulnerability Detail

CVE-2024-46677

Summary	In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.)
Publication Date	Sept. 13, 2024, 3:15 p.m.
Registration Date	Sept. 13, 2024, 8 p.m.
Last Update	Sept. 13, 2024, 3:15 p.m.

Related information, measures and tools

No	URL	refsource	タグ
1	https://git.kernel.org/stable/c/620fe9809752fae91b4190e897b81ed9976dfb39
2	https://git.kernel.org/stable/c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e
3	https://git.kernel.org/stable/c/8bbb9e4e0e66a39282e582d0440724055404b38c
4	https://git.kernel.org/stable/c/4643b91691e969b1b9ad54bf552d7a990cfa3b87
5	https://git.kernel.org/stable/c/e8b9930b0eb045d19e883c65ff9676fc89320c70
6	https://git.kernel.org/stable/c/28c67f0f84f889fe9f4cbda8354132b20dc9212d
7	https://git.kernel.org/stable/c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2
8	https://git.kernel.org/stable/c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性

Title	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性
Summary	Linux の Linux Kernel には、NULL ポインタデリファレンスに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 27, 2024, midnight
Registration Date	Sept. 17, 2024, 2:50 p.m.
Last Update	Sept. 2, 2025, 3:18 p.m.

Affected System

Linux

Linux Kernel 4.12 以上 4.19.321 未満

Linux Kernel 4.20 以上 5.4.283 未満

Linux Kernel 5.11 以上 5.15.166 未満

Linux Kernel 5.16 以上 6.1.108 未満

Linux Kernel 5.5 以上 5.10.225 未満

Linux Kernel 6.11

Linux Kernel 6.2 以上 6.6.49 未満

Linux Kernel 6.7 以上 6.10.8 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-46677	https://www.cve.org/CVERecord?id=CVE-2024-46677
National Vulnerability Database (NVD)
2	CVE-2024-46677	https://nvd.nist.gov/vuln/detail/CVE-2024-46677

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	video/aperture: optionally match the device in sysfb_disable() (28c67f0)	https://git.kernel.org/stable/c/28c67f0f84f889fe9f4cbda8354132b20dc9212d
2	video/aperture: optionally match the device in sysfb_disable() (4643b91)	https://git.kernel.org/stable/c/4643b91691e969b1b9ad54bf552d7a990cfa3b87
3	video/aperture: optionally match the device in sysfb_disable() (612edd3)	https://git.kernel.org/stable/c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2
4	video/aperture: optionally match the device in sysfb_disable() (620fe98)	https://git.kernel.org/stable/c/620fe9809752fae91b4190e897b81ed9976dfb39
5	video/aperture: optionally match the device in sysfb_disable() (8bbb9e4)	https://git.kernel.org/stable/c/8bbb9e4e0e66a39282e582d0440724055404b38c
6	video/aperture: optionally match the device in sysfb_disable() (bdd99e5)	https://git.kernel.org/stable/c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e
7	video/aperture: optionally match the device in sysfb_disable() (defd8b3)	https://git.kernel.org/stable/c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda
8	video/aperture: optionally match the device in sysfb_disable() (e8b9930)	https://git.kernel.org/stable/c/e8b9930b0eb045d19e883c65ff9676fc89320c70
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年09月17日] 掲載	Sept. 17, 2024, 2:50 p.m.
2	[2025年08月19日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 19, 2025, 9:33 a.m.