CVE-2024-36270netfilter: tproxy: bail out if IP has been disabled on the device
Updated under an hour ago ()
Does this affect you?
It affects Linux and 5 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [..] RIP: 0010:nf_tproxy_laddr4+0xb7/0x340 net/ipv4/netfilter/nf_tproxy_ipv4.c:62 Call Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c:168 __in_dev_get_rcu() can return NULL, so check for this.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from cc6eb433856983e91071469c4ce57accb6947ccb before 10f0af5234dafd03d2b75233428ec3f11cf7e43d; from cc6eb433856983e91071469c4ce57accb6947ccb before 07eeedafc59c45fe5de43958128542be3784764c; from cc6eb433856983e91071469c4ce57accb6947ccb before 6fe5af4ff06db3d4d80e07a19356640428159f03; from cc6eb433856983e91071469c4ce57accb6947ccb before caf3a8afb5ea00db6d5398adf148d5534615fd80; from cc6eb433856983e91071469c4ce57accb6947ccb before 570b4c52096e62fda562448f5760fd0ff06110f0; from cc6eb433856983e91071469c4ce57accb6947ccb before 819bfeca16eb9ad647ddcae25e7e12c30612147c; from cc6eb433856983e91071469c4ce57accb6947ccb before 21a673bddc8fd4873c370caf9ae70ffc6d47e8d3 | CNA record |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V3.1 | CISA ADP |
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name) | all versions not affected | CISA ADP |
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name) | before V3.1 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 2.6.37 before 5.4.278; from 5.5 before 5.10.219; from 5.11 before 5.15.161; from 5.16 before 6.1.93; from 6.2 before 6.6.33; from 6.7 before 6.9.4; 6.10 | NVD |
References
- https://git.kernel.org/stable/c/10f0af5234dafd03d2b75233428ec3f11cf7e43dpatch
- https://git.kernel.org/stable/c/07eeedafc59c45fe5de43958128542be3784764cpatch
- https://git.kernel.org/stable/c/6fe5af4ff06db3d4d80e07a19356640428159f03patch
- https://git.kernel.org/stable/c/caf3a8afb5ea00db6d5398adf148d5534615fd80patch
- https://git.kernel.org/stable/c/570b4c52096e62fda562448f5760fd0ff06110f0patch
- https://git.kernel.org/stable/c/819bfeca16eb9ad647ddcae25e7e12c30612147cpatch
- https://git.kernel.org/stable/c/21a673bddc8fd4873c370caf9ae70ffc6d47e8d3patch
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.