Medium 5.5Published May 30, 2024

CVE-2024-36903ipv6: Fix potential uninit-value access in __ip6_make_skb()

Updated under an hour ago (Oct 28, 2026, 12:00 AM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	605b056d63302ae84eb136e88d4df49124bd5e0d builds before 59d74c843ebf46264c7903726cf6f2673a93b07a; from d65ff2fe877c471aa6e79efa7bd8ff66e147c317 before 40e5444a3ac315b60e94d82226b73cd82145d09e; from 2c9cefc142c1dc2759e19a92d3b2b3715e985beb before a05c1ede50e9656f0752e523c7b54f3a3489e9a8; from ea30388baebcce37fd594d425a65037ca35e59e8 before 68c8ba16ab712eb709c6bab80ff151079d11d97a; from ea30388baebcce37fd594d425a65037ca35e59e8 before 2367bf254f3a27ecc6e229afd7a8b0a1395f7be3; from ea30388baebcce37fd594d425a65037ca35e59e8 before 4e13d3a9c25b7080f8a619f961e943fe08c2672c; 165370522cc48127da564a08584a7391e6341908; f394f690a30a5ec0413c62777a058eaf3d6e10d5; and 9 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.14.313 before 4.15; from 4.19.281 before 4.20; from 5.4.241 before 5.5; from 5.10.178 before 5.11; from 5.15.107 before 5.16; from 6.1.24 before 6.2; from 6.2.11 before 6.6.31; from 6.7 before 6.8.10; and 7 more ranges	NVD

References

References

https://git.kernel.org/stable/c/59d74c843ebf46264c7903726cf6f2673a93b07a
https://git.kernel.org/stable/c/40e5444a3ac315b60e94d82226b73cd82145d09e
https://git.kernel.org/stable/c/a05c1ede50e9656f0752e523c7b54f3a3489e9a8
https://git.kernel.org/stable/c/68c8ba16ab712eb709c6bab80ff151079d11d97a	patch
https://git.kernel.org/stable/c/2367bf254f3a27ecc6e229afd7a8b0a1395f7be3	patch
https://git.kernel.org/stable/c/4e13d3a9c25b7080f8a619f961e943fe08c2672c	patch
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.