In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH map and an sk_msg program user can steer …
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH map and an sk_msg program user can steer messages sent from one TCP socket (s1) to actually egress from another TCP socket (s2): tcp_bpf_sendmsg(s1) // = sk_prot->sendmsg tcp_bpf_send_verdict(s1) // __SK_REDIRECT case tcp_bpf_sendmsg_redir(s2) tcp_bpf_push_locked(s2) tcp_bpf_push(s2) tcp_rate_check_app_limited(s2) // expe…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/b80e31baa43614e086a9d29dc1151932b1bd7fc5 Patch
- https://git.kernel.org/stable/c/b8f97e47b6fb84fcf2f5a22e725eefb6cf5070c2 Patch
- https://git.kernel.org/stable/c/bc8b89b6963803a123f64aa9494155a037b3d728 Patch
- https://git.kernel.org/stable/c/ded6e448028f0f91b6af35985afca01fa02a9089 Patch
- https://git.kernel.org/stable/c/b80e31baa43614e086a9d29dc1151932b1bd7fc5 Patch
- https://git.kernel.org/stable/c/b8f97e47b6fb84fcf2f5a22e725eefb6cf5070c2 Patch
- https://git.kernel.org/stable/c/bc8b89b6963803a123f64aa9494155a037b3d728 Patch
- https://git.kernel.org/stable/c/ded6e448028f0f91b6af35985afca01fa02a9089 Patch
Timeline
- nvd_ingest NVD