CVE-2024-40993 | Linux Kernel up to 6.1.95/6.6.35/6.9.6/6.10-rc3/6.10-rc4 ipset rcu_dereference_protected null pointer dereference

CVE-2024-40993 | Linux Kernel up to 6.1.95/6.6.35/6.9.6/6.10-rc3/6.10-rc4 ipset rcu_dereference_protected null pointer dereference

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.95/6.6.35/6.9.6/6.10-rc3/6.10-rc4. Affected is the function rcu_dereference_protected of the component ipset. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2024-40993. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.