---
id: CVE-2024-38612
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ipv6: sr: fix invalid unregister error path

  The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL
  is not defined
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ipv6: sr: fix invalid unregister error path

  The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL
  is not defined. In that case if seg6_hmac_init() f…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-416
  - CWE-476
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 4.10, < 4.19.316'
  - 'linux_kernel >= 4.20, < 5.4.278'
  - 'linux_kernel >= 5.5, < 5.10.219'
  - 'linux_kernel >= 5.11, < 5.15.161'
  - 'linux_kernel >= 5.16, < 6.1.93'
  - 'linux_kernel >= 6.2, < 6.6.33'
  - 'linux_kernel >= 6.7, < 6.8.12'
  - 'linux_kernel >= 6.9, < 6.9.3'
patched:
  - linux_kernel 6.9.3
published: '2024-06-19'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:18:31.360'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-38612'
references:
  - url: 'https://git.kernel.org/stable/c/00e6335329f23ac6cf3105931691674e28bc598c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/10610575a3ac2a702bf5c57aa931beaf847949c7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/160e9d2752181fcf18c662e74022d77d3164cd45'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/1a63730fb315bb1bab97edd69ff58ad45e04bb01'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3398a40dccb88d3a7eef378247a023a78472db66'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/646cd236c55e2cb5f146fc41bbe4034c4af5b2a4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/85a70ff1e572160f1eeb096ed48d09a1c9d4d89a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c04d6a914e890ccea4a9d11233009a2ee7978bf4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e77a3ec7ada84543e75722a1283785a6544de925'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/00e6335329f23ac6cf3105931691674e28bc598c'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/10610575a3ac2a702bf5c57aa931beaf847949c7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/160e9d2752181fcf18c662e74022d77d3164cd45'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/1a63730fb315bb1bab97edd69ff58ad45e04bb01'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/3398a40dccb88d3a7eef378247a023a78472db66'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/646cd236c55e2cb5f146fc41bbe4034c4af5b2a4'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/85a70ff1e572160f1eeb096ed48d09a1c9d4d89a'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/c04d6a914e890ccea4a9d11233009a2ee7978bf4'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e77a3ec7ada84543e75722a1283785a6544de925'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-613116.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00661
epssPercentile: 0.51398
ingestedAt: '2026-10-15T03:30:12.709Z'
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2024-06-25T14:07:52.263547Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: fix invalid unregister error path

The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL
is not defined. In that case if seg6_hmac_init() fails, the
genl_unregister_family() isn't called.

This issue exist since commit 46738b1317e1 ("ipv6: sr: add option to control
lwtunnel support"), and commit 5559cea2d5aa ("ipv6: sr: fix possible
use-after-free and null-ptr-deref") replaced unregister_pernet_subsys()
with genl_unregister_family() in this error path.

## Affected

- `linux_kernel >= 4.10, < 4.19.316`
- `linux_kernel >= 4.20, < 5.4.278`
- `linux_kernel >= 5.5, < 5.10.219`
- `linux_kernel >= 5.11, < 5.15.161`
- `linux_kernel >= 5.16, < 6.1.93`
- `linux_kernel >= 6.2, < 6.6.33`
- `linux_kernel >= 6.7, < 6.8.12`
- `linux_kernel >= 6.9, < 6.9.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.9.3`