In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts [1], using llc and devices not supporting IFF_TX_…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts [1], using llc and devices not supporting IFF_TX_SKB_SHARING. In this case, e1000 driver calls eth_skb_pad(), while the skb is shared. Simply replace skb_get() by skb_clone() in net/llc/llc_s_ac.c Note that e1000 driver might have an issue with pktgen, because it does not clear IFF_TX_SKB_SHARING, this is an orthogonal change. We need to audit…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/056e8a46d79e22983bae4267e0d9c52927076f46 Patch
- https://git.kernel.org/stable/c/0f764208dc24ea043c3e20194d32aebf94f8459c Patch
- https://git.kernel.org/stable/c/13f3f872627f0f27c31245524fc11367756240ad Patch
- https://git.kernel.org/stable/c/17f86e25431ebc15aa9245ff156414fdad47822d Patch
- https://git.kernel.org/stable/c/416e8b4c20c6398044e93008deefd563289f477d Patch
- https://git.kernel.org/stable/c/64e6a754d33d31aa844b3ee66fb93ac84ca1565e Patch
- https://git.kernel.org/stable/c/9b6f083db141ece0024be01526aa05aa978811cb Patch
- https://git.kernel.org/stable/c/cd1c44327bbbd50fc24f2b38892f5f328b784d0f Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Timeline
- nvd_ingest NVD