In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Ca…
High CVSS 8.6
Summary
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Call pskb_inet_may_pull() to fix this, and initialize ipv6h variable after this call as it can change skb->head. [1] BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] BUG: KMSA…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 Mailing List
- https://git.kernel.org/stable/c/8d975c15c0cd744000ca386247432d57b21f9df0 Mailing List
- https://git.kernel.org/stable/c/a9bc32879a08f23cdb80a48c738017e39aea1080 Mailing List
- https://git.kernel.org/stable/c/af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 Mailing List
- https://git.kernel.org/stable/c/c835df3bcc14858ae9b27315dd7de76370b94f3a Mailing List
- https://git.kernel.org/stable/c/d54e4da98bbfa8c257bdca94c49652d81d18a4d8 Mailing List
- https://git.kernel.org/stable/c/350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 Mailing List
- https://git.kernel.org/stable/c/8d975c15c0cd744000ca386247432d57b21f9df0 Mailing List
- https://git.kernel.org/stable/c/a9bc32879a08f23cdb80a48c738017e39aea1080 Mailing List
- https://git.kernel.org/stable/c/af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 Mailing List
- https://git.kernel.org/stable/c/c835df3bcc14858ae9b27315dd7de76370b94f3a Mailing List
- https://git.kernel.org/stable/c/d54e4da98bbfa8c257bdca94c49652d81d18a4d8 Mailing List
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
- https://security.netapp.com/advisory/ntap-20241108-0008/ Third Party Advisory
Timeline
- nvd_ingest NVD