Wind River Support Network

HomeDefectsLIN1022-10224

Fixed

LIN1022-10224 : Security Advisory - linux - CVE-2024-42154

Created: Jul 30, 2024 Updated: Oct 14, 2025

Resolved Date: Oct 13, 2025

Found In Version: 10.22.33.1

Fix Version: 10.22.33.17

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at least 4 bytes long, and the policy doesn't have an entry
for this attribute at all (neither does it for IPv6 but v6 is
manually validated).

CVEs

CVE-2024-42154