In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, t…
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inet_frag_reasm_prepare skb_morph which is not straightforward. However when frags arrive out of order, nobody unref the last frag, and all frags are leaked. The situation is even worse, as initiating packet capture can lead to a crash[0] when skb has b…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0b5b831122fc3789fff75be433ba3e4dd7b779d4 Mailing List
- https://git.kernel.org/stable/c/172ba7d46c202e679f3ccb10264c67416aaeb1c4 Mailing List
- https://git.kernel.org/stable/c/3f14b377d01d8357eba032b4cabc8c1149b458b6 Mailing List
- https://git.kernel.org/stable/c/73f7da5fd124f2cda9161e2e46114915e6e82e97 Mailing List
- https://git.kernel.org/stable/c/f5346df0591d10bc948761ca854b1fae6d2ef441 Mailing List
- https://git.kernel.org/stable/c/0b5b831122fc3789fff75be433ba3e4dd7b779d4 Mailing List
- https://git.kernel.org/stable/c/172ba7d46c202e679f3ccb10264c67416aaeb1c4 Mailing List
- https://git.kernel.org/stable/c/3f14b377d01d8357eba032b4cabc8c1149b458b6 Mailing List
- https://git.kernel.org/stable/c/73f7da5fd124f2cda9161e2e46114915e6e82e97 Mailing List
- https://git.kernel.org/stable/c/f5346df0591d10bc948761ca854b1fae6d2ef441 Mailing List
Timeline
- nvd_ingest NVD