Medium 5.5Published Jun 21, 2024

CVE-2024-36270netfilter: tproxy: bail out if IP has been disabled on the device

Updated under an hour ago (Oct 28, 2026, 11:10 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [..] RIP: 0010:nf_tproxy_laddr4+0xb7/0x340 net/ipv4/netfilter/nf_tproxy_ipv4.c:62 Call Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c:168 __in_dev_get_rcu() can return NULL, so check for this.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from cc6eb433856983e91071469c4ce57accb6947ccb before 10f0af5234dafd03d2b75233428ec3f11cf7e43d; from cc6eb433856983e91071469c4ce57accb6947ccb before 07eeedafc59c45fe5de43958128542be3784764c; from cc6eb433856983e91071469c4ce57accb6947ccb before 6fe5af4ff06db3d4d80e07a19356640428159f03; from cc6eb433856983e91071469c4ce57accb6947ccb before caf3a8afb5ea00db6d5398adf148d5534615fd80; from cc6eb433856983e91071469c4ce57accb6947ccb before 570b4c52096e62fda562448f5760fd0ff06110f0; from cc6eb433856983e91071469c4ce57accb6947ccb before 819bfeca16eb9ad647ddcae25e7e12c30612147c; from cc6eb433856983e91071469c4ce57accb6947ccb before 21a673bddc8fd4873c370caf9ae70ffc6d47e8d3	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.37 before 5.4.278; from 5.5 before 5.10.219; from 5.11 before 5.15.161; from 5.16 before 6.1.93; from 6.2 before 6.6.33; from 6.7 before 6.9.4; 6.10	NVD

References

References

https://git.kernel.org/stable/c/10f0af5234dafd03d2b75233428ec3f11cf7e43d	patch
https://git.kernel.org/stable/c/07eeedafc59c45fe5de43958128542be3784764c	patch
https://git.kernel.org/stable/c/6fe5af4ff06db3d4d80e07a19356640428159f03	patch
https://git.kernel.org/stable/c/caf3a8afb5ea00db6d5398adf148d5534615fd80	patch
https://git.kernel.org/stable/c/570b4c52096e62fda562448f5760fd0ff06110f0	patch
https://git.kernel.org/stable/c/819bfeca16eb9ad647ddcae25e7e12c30612147c	patch
https://git.kernel.org/stable/c/21a673bddc8fd4873c370caf9ae70ffc6d47e8d3	patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-613116.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.