Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-44940 Details

Description

In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported protocol Drop the WARN_ON_ONCE inn gue_gro_receive if the encapsulated type is not known or does not have a GRO handler. Such a packet is easily constructed. Syzbot generates them and sets off this warning. Remove the warning as it is expected and not actionable. The warning was previously reduced from WARN_ON to WARN_ON_ONCE in commit 270136613bf7 ("fou: Do WARN_ON_ONCE in gue_gro_receive for bad proto callbacks").

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/3db4395332e7050ef9ddeb3052e6b5019f2a2a59 kernel.orgPatch
https://git.kernel.org/stable/c/440ab7f97261bc28501636a13998e1b1946d2e79 kernel.orgPatch
https://git.kernel.org/stable/c/5a2e37bc648a2503bf6d687aed27b9f4455d82eb kernel.orgIssue Tracking
https://git.kernel.org/stable/c/a925a200299a6dfc7c172f54da6f374edc930053 kernel.orgPatch
https://git.kernel.org/stable/c/b1453a5616c7bd8acd90633ceba4e59105ba3b51 kernel.orgPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
debian debian linux
11.0

CPE

  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
linux linux kernel
>= 3.18, < 5.10.234
>= 5.11, < 5.15.174
>= 5.16, < 6.1.107
>= 6.2, < 6.6.47
>= 6.7, < 6.10.6

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

11 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-44940
NVD Published Date:
Aug 26, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-44940 Details - Not Deferred