CVE-2024-0584

14 Feb 2024, 06:15

Type	Values Removed	Values Added
CWE	CWE-416
Summary	A use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel. This flaw allows a local user to observe a refcnt use-after-free issue when receiving an igmp query packet, leading to a kernel information leak.	Rejected reason: Do not use this CVE as it is duplicate of CVE-2023-6932
CVSS	v2 : unknown v3 : 5.5	v2 : unknown v3 : unknown
References	{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2258584', 'name': 'RHBZ#2258584', 'tags': ['Exploit', 'Issue Tracking', 'Third Party Advisory'], 'refsource': ''} {'url': 'https://lore.kernel.org/netdev/170083982540.9628.4546899811301303734.git-patchwork-notify@kernel.org/T/', 'name': 'https://lore.kernel.org/netdev/170083982540.9628.4546899811301303734.git-patchwork-notify@kernel.org/T/', 'tags': ['Mailing List', 'Patch'], 'refsource': ''} {'url': 'https://access.redhat.com/security/cve/CVE-2024-0584', 'name': 'https://access.redhat.com/security/cve/CVE-2024-0584', 'tags': ['Third Party Advisory'], 'refsource': ''}
CPE	cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*

---

23 Jan 2024, 20:18

Type	Values Removed	Values Added
References	() https://bugzilla.redhat.com/show_bug.cgi?id=2258584 -	() https://bugzilla.redhat.com/show_bug.cgi?id=2258584 - Exploit, Issue Tracking, Third Party Advisory
References	() https://lore.kernel.org/netdev/170083982540.9628.4546899811301303734.git-patchwork-notify@kernel.org/T/ -	() https://lore.kernel.org/netdev/170083982540.9628.4546899811301303734.git-patchwork-notify@kernel.org/T/ - Mailing List, Patch
References	() https://access.redhat.com/security/cve/CVE-2024-0584 -	() https://access.redhat.com/security/cve/CVE-2024-0584 - Third Party Advisory
First Time		Linux Linux linux Kernel
CWE		CWE-416
CPE		cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
CVSS	v2 : unknown v3 : unknown	v2 : unknown v3 : 5.5

---

16 Jan 2024, 14:15

Type	Values Removed	Values Added
New CVE

---