CVE-2024-44985: linux Use After Free
CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2024-44985DEBIAN-CVE-2024-44985
Published 04-09-2024Last modified 05-08-2026
Vulnerability summary
CVE-2024-44985 is a critical (CVSS 9.8) Use After Free vulnerability in linux. EPSS estimates a 0.88% chance of exploitation in the next 30 days, higher than 58.5% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
0.88%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 19 · Related 15Timeline
- 04-09-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb has been freed and the associated dst/idev could also have been freed. We must use rcu_read_lock() to prevent a possible UAF.
CVSS metrics
4 scores · 4 sources · 1 versionCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–9.8
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.88%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
0.00 pp
From 0.88% on 21-09-2026
21-09-202621-10-2026
EPSS score0.88%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu117 products
- linux< 5.15.0-125.135 | < 6.8.0-50.51
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1072.78 | < 6.8.0-1020.22
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 81d626b00bdba16504eeae9cc891b18e83a9471a, < b3a3d5333c13a1be57499581eab4a8fc94d57f36 | ≥ ee6b1db17f8287b615448488fc37f42bcfe9ece6, < c47e022011719fc5727bca661d662303180535ba | ≥ 0c9f227bee11910a49e1d159abe102d06e3745d5, < 975f764e96f71616b530e300c1bb2ac0ce0c2596 | ≥ 0c9f227bee11910a49e1d159abe102d06e3745d5, < 38a21c026ed2cc7232414cb166efc1923f34af17 | ≥ 0c9f227bee11910a49e1d159abe102d06e3745d5, < 124b428fe28064c809e4237b0b38e97200a8a4a8 | ≥ 0c9f227bee11910a49e1d159abe102d06e3745d5, < fc88d6c1f2895a5775795d82ec581afdff7661d1 | ≥ 0c9f227bee11910a49e1d159abe102d06e3745d5, < 2d5ff7e339d04622d8282661df36151906d0e1c7 | 5.15
- linux_kernel≥ 5.15, < 5.15.166 | ≥ 5.16, < 6.1.107 | ≥ 6.2, < 6.6.48 | ≥ 6.7, < 6.10.7 | 6.11:rc1 | 6.11:rc2 | 6.11:rc3 | 6.11:rc4
Debian1 product
- linux< 6.1.112-1 | < 6.10.7-1
3 vendors · 120 products
