In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_skb() udp_tunnel_xmit_skb() / udp_tunnel6_xmit_skb() are expected to run with BH …
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_skb() udp_tunnel_xmit_skb() / udp_tunnel6_xmit_skb() are expected to run with BH disabled. After commit 6f1a9140ecda ("add xmit recursion limit to tunnel xmit functions"), on the path: udp(6)_tunnel_xmit_skb() -> ip(6)tunnel_xmit() dev_xmit_recursion_inc()/dec() must stay balanced on the same CPU. Without local_bh_disable(), the context may move between CPUs, which can bre…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0de7db2eb27e82b983157016fa604b1ba664ae5f Patch
- https://git.kernel.org/stable/c/2cd7e6971fc2787408ceef17906ea152791448cf Patch
- https://git.kernel.org/stable/c/790093245e35040c2adb15f48970020425aa3f47 Patch
- https://git.kernel.org/stable/c/be3bfcb34bda04f6a350710db471d4133f950f2c Patch
Timeline
- nvd_ingest NVD