Answer in brief
CVE-2024-35857 records a Unknown severity vulnerability in icmp: prevent possible NULL dereferences from icmp_build_probe(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <599c9ad5e1d43f5c12d869f5fd406ba5d8c55270 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <d68dc711d84fdcf698e5d45308c3ddeede586350 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <3e2979bf080c40da4f7c93aff8575ab8bc62b767 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <c58e88d49097bd12dfcfef4f075b43f5d5830941 | 23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401, 599c9ad5e1d43f5c12d869f5fd406ba5d8c55270, d68dc711d84fdcf698e5d45308c3ddeede586350, 3e2979bf080c40da4f7c93aff8575ab8bc62b767, c58e88d49097bd12dfcfef4f075b43f5d5830941 |
| Linux/Linuxgeneric | 5.13 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmp_build_probe() First problem is a double call to __in_dev_get_rcu(), because the second one could return NULL. if (__in_dev_get_rcu(dev) && __in_dev_get_rcu(dev)->ifa_list) Second problem is a read from dev->ip6_ptr with no NULL check: if (!list_empty(&rcu_dereference(dev->ip6_ptr)->addr_list)) Use the correct RCU API to fix these. v2: add missing include <net/addrconf.h>
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2024-35857 records a Unknown severity vulnerability in icmp: prevent possible NULL dereferences from icmp_build_probe(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <599c9ad5e1d43f5c12d869f5fd406ba5d8c55270 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <d68dc711d84fdcf698e5d45308c3ddeede586350 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <3e2979bf080c40da4f7c93aff8575ab8bc62b767 || >=d329ea5bd8845f0b196bf41b18b6173340d6e0e4 <c58e88d49097bd12dfcfef4f075b43f5d5830941 | 23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401, 599c9ad5e1d43f5c12d869f5fd406ba5d8c55270, d68dc711d84fdcf698e5d45308c3ddeede586350, 3e2979bf080c40da4f7c93aff8575ab8bc62b767, c58e88d49097bd12dfcfef4f075b43f5d5830941 |
| Linux/Linuxgeneric | 5.13 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmp_build_probe() First problem is a double call to __in_dev_get_rcu(), because the second one could return NULL. if (__in_dev_get_rcu(dev) && __in_dev_get_rcu(dev)->ifa_list) Second problem is a read from dev->ip6_ptr with no NULL check: if (!list_empty(&rcu_dereference(dev->ip6_ptr)->addr_list)) Use the correct RCU API to fix these. v2: add missing include <net/addrconf.h>
Quoted source text, attributed separately from HOL analysis.