5.5

CVE-2024-56647: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-56647DEBIAN-CVE-2024-56647
Published 27-12-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-56647 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.2% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 22 · Related 23
RHSA-2025:6966SUSE-SU-2025:0784-1SUSE-SU-2025:0834-1SUSE-SU-2025:0847-1SUSE-SU-2025:0856-1SUSE-SU-2025:0955-1

Timeline

  1. 27-12-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering ip_rt_bug arp link failure may trigger ip_rt_bug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 ip_rt_bug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc6-00077-g2e1b3cc9d7f7 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:ip_rt_bug+0x14/0x20 Call Trace: <IRQ> ip_send_skb+0x14/0x40 __icmp_send+0x42d/0x6a0 ipv4_link_failure+0xe2/0x1d0 arp_error_report+0x3c/0x50 neigh_invalidate+0x8d/0x100 neigh_timer_handler+0x2e1/0x330 call_timer_fn+0x21/0x120 __run_timer_base.part.0+0x1c9/0x270 run_timer_softirq+0x4c/0x80 handle_softirqs+0xac/0x280 irq_exit_rcu+0x62/0x80 sysvec_apic_timer_interrupt+0x77/0x90 The script below reproduces this scenario: ip xfrm policy add src 0.0.0.0/0 dst 0.0.0.0/0 \ dir out priority 0 ptype main flag localok icmp ip l a veth1 type veth ip a a 192.168.141.111/24 dev veth0 ip l s veth0 up ping 192.168.141.155 -c 1 icmp_route_lookup() create input routes for locally generated packets while xfrm relookup ICMP traffic.Then it will set input route (dst->out = ip_rt_bug) to skb for DESTUNREACH. For ICMP err triggered by locally generated packets, dst->dev of output route is loopback. Generally, xfrm relookup verification is not required on loopback interfaces (net.ipv4.conf.lo.disable_xfrm = 1). Skip icmp relookup for locally generated packets to fix it.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu136 products
  • linuxAll versions (No fix recorded) | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 8b7817f3a959ed99d7443afc12f78a7e1fcc2063, < d50981aaaefc3b04490fbc8274d37881a2b1b112 | ≥ 8b7817f3a959ed99d7443afc12f78a7e1fcc2063, < da54b3039d436227deebbc202cefea63bd318a38 | ≥ 8b7817f3a959ed99d7443afc12f78a7e1fcc2063, < 9545011e7b2a8fc0cbd6e387a09f12cd41d7d82f | ≥ 8b7817f3a959ed99d7443afc12f78a7e1fcc2063, < c44daa7e3c73229f7ac74985acb8c7fb909c4e0a | 2.6.25
  • linux_kernel≥ 2.6.25, < 6.12.5 | 6.13:rc1
Debian1 product
  • linux< 6.1.170-3 | < 6.12.5-1

3 vendors · 139 products

References

24 links
Show all 24 references