In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at…
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is triggered as part of the calipso_skbuff_setattr() routine when skb_cow() is passed headroom > INT_MAX (i.e. (int)(skb_headroom(skb) + len_delta) < 0). The root cause of the bug is due to an implicit integer cast in __skb_cow(). The check (h…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2bb759062efa188ea5d07242a43e5aa5464bbae1 Patch
- https://git.kernel.org/stable/c/58fc7342b529803d3c221101102fe913df7adb83 Patch
- https://git.kernel.org/stable/c/6b7522424529556c9cbc15e15e7bd4eeae310910 Patch
- https://git.kernel.org/stable/c/73744ad5696dce0e0f43872aba8de6a83d6ad570 Patch
- https://git.kernel.org/stable/c/86f365897068d09418488165a68b23cb5baa37f2 Patch
- https://git.kernel.org/stable/c/bf3709738d8a8cc6fa275773170c5c29511a0b24 Patch
- https://git.kernel.org/stable/c/c53aa6a5086f03f19564096ee084a202a8c738c0 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
Timeline
- nvd_ingest NVD