In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the caller-supplied IPv4 header fits within th…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the caller-supplied IPv4 header fits within the message length: iphlen = iph->ihl * 4; err = -EINVAL; if (iphlen > length) goto error_free; if (iphlen >= sizeof(*iph)) { /* fix up saddr, tot_len, id, csum, transport_header */ } It does not, however, reject ihl < 5. For such a packet the "if (iphlen >= siz…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1065b9efa4126df559b03a849c139ecfae92cd25
- https://git.kernel.org/stable/c/145e9afa5b905229b4788bb72c3255f5a5f77508
- https://git.kernel.org/stable/c/3c5411fa4944ed99af3d9d1de750ea8169b6dac9
- https://git.kernel.org/stable/c/5a564f737ec54d63e8ee221d3ff396d07586d464
- https://git.kernel.org/stable/c/7725cd3b471740fd23d25ed1da722c671fb2a5d3
- https://git.kernel.org/stable/c/915fab69823a14c170dbaa3b41978768e0fe62fc
- https://git.kernel.org/stable/c/bbe0be67de296176e7243c76e3d9f02f6ae9ff0b
- https://git.kernel.org/stable/c/bc20dbd48c26e743f7e0845020c11ed2ce8b15ee
Timeline
- nvd_ingest NVD