[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-DEBIAN-CVE-2024-36938":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":16,"duplicates":19,"related":20,"reserved_at":9,"published_at":21,"modified_at":22,"state":9,"summary":23,"references_raw":25,"kevs":32,"epss":9,"epss_history":33,"metrics":34,"affected":41},"DEBIAN-CVE-2024-36938","In the Linux kernel, the following vulnerability has been resolved:  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue  Fix NULL pointer data-races in sk_psock_skb_ingress_enqueue() which syzbot reported [1].  [1] BUG: KCSAN: data-race in sk_psock_drop / sk_psock_skb_ingress_enqueue  write to 0xffff88814b3278b8 of 8 bytes by task 10724 on cpu 1:  sk_psock_stop_verdict net/core/skmsg.c:1257 [inline]  sk_psock_drop+0x13e/0x1f0 net/core/skmsg.c:843  sk_psock_put include/linux/skmsg.h:459 [inline]  sock_map_close+0x1a7/0x260 net/core/sock_map.c:1648  unix_release+0x4b/0x80 net/unix/af_unix.c:1048  __sock_release net/socket.c:659 [inline]  sock_close+0x68/0x150 net/socket.c:1421  __fput+0x2c1/0x660 fs/file_table.c:422  __fput_sync+0x44/0x60 fs/file_table.c:507  __do_sys_close fs/open.c:1556 [inline]  __se_sys_close+0x101/0x1b0 fs/open.c:1541  __x64_sys_close+0x1f/0x30 fs/open.c:1541  do_syscall_64+0xd3/0x1d0  entry_SYSCALL_64_after_hwframe+0x6d/0x75  read to 0xffff88814b3278b8 of 8 bytes by task 10713 on cpu 0:  sk_psock_data_ready include/linux/skmsg.h:464 [inline]  sk_psock_skb_ingress_enqueue+0x32d/0x390 net/core/skmsg.c:555  sk_psock_skb_ingress_self+0x185/0x1e0 net/core/skmsg.c:606  sk_psock_verdict_apply net/core/skmsg.c:1008 [inline]  sk_psock_verdict_recv+0x3e4/0x4a0 net/core/skmsg.c:1202  unix_read_skb net/unix/af_unix.c:2546 [inline]  unix_stream_read_skb+0x9e/0xf0 net/unix/af_unix.c:2682  sk_psock_verdict_data_ready+0x77/0x220 net/core/skmsg.c:1223  unix_stream_sendmsg+0x527/0x860 net/unix/af_unix.c:2339  sock_sendmsg_nosec net/socket.c:730 [inline]  __sock_sendmsg+0x140/0x180 net/socket.c:745  ____sys_sendmsg+0x312/0x410 net/socket.c:2584  ___sys_sendmsg net/socket.c:2638 [inline]  __sys_sendmsg+0x1e9/0x280 net/socket.c:2667  __do_sys_sendmsg net/socket.c:2676 [inline]  __se_sys_sendmsg net/socket.c:2674 [inline]  __x64_sys_sendmsg+0x46/0x50 net/socket.c:2674  do_syscall_64+0xd3/0x1d0  entry_SYSCALL_64_after_hwframe+0x6d/0x75  value changed: 0xffffffff83d7feb0 -> 0x0000000000000000  Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 10713 Comm: syz-executor.4 Tainted: G        W          6.8.0-syzkaller-08951-gfe46a7dd189e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024  Prior to this, commit 4cd12c6065df (\"bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()\") fixed one NULL pointer similarly due to no protection of saved_data_ready. Here is another different caller causing the same issue because of the same reason. So we should protect it with sk_callback_lock read lock because the writer side in the sk_psock_drop() uses \"write_lock_bh(&sk->sk_callback_lock);\".  To avoid errors that could happen in future, I move those two pairs of lock into the sk_psock_data_ready(), which is suggested by John Fastabend.",null,[],[],[],[14],{"_key":15},"CVE-2024-36938",[17],{"_key":18},"DSA-5747-1",[],[],"2024-05-30T16:15:16.897Z","2026-04-28T20:28:06.606976Z",{"cisa_kev":24,"cisa_ransomware":24,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[26],{"url":27,"sources":28,"tags":30},"https://security-tracker.debian.org/tracker/CVE-2024-36938",[29],"osv_debian",[31],"Advisory",[],[],[35],{"source":29,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":36,"cvss_v4_0":9},{"baseScore":37,"baseSeverity":9,"vectorString":38,"impactScore":39,"exploitabilityScore":40},5.5,"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",6,4.6,[42],{"ecosystem":43,"name":44,"vendor":45,"product":44,"cpe_part":9,"purl_type":46,"purl_namespace":45,"purl_name":44,"source":9,"versions":47},"Debian","linux","debian","deb",[48,54,57,60],{"version":49,"is_range":50,"range_type":51,"version_start":9,"version_start_type":9,"version_end":52,"version_end_type":53,"fixed_in":9},"lt5_10_223_1",true,"ecosystem","5.10.223-1","excluding",{"version":55,"is_range":50,"range_type":51,"version_start":9,"version_start_type":9,"version_end":56,"version_end_type":53,"fixed_in":9},"lt6_1_94_1","6.1.94-1",{"version":58,"is_range":50,"range_type":51,"version_start":9,"version_start_type":9,"version_end":59,"version_end_type":53,"fixed_in":9},"lt6_8_11_1","6.8.11-1",{"version":58,"is_range":50,"range_type":51,"version_start":9,"version_start_type":9,"version_end":59,"version_end_type":53,"fixed_in":9}]