In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read of size 1 at addr ffff88812fb4000e by task syz-executor183/5191 [..] kasan_report+0xda/0x110 mm/kasan/report.c:588 __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 skb_flow_dissect_flow_keys include/linux/skbuff.h:1514 …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/049d7989c67e8dd50f07a2096dbafdb41331fb9b Patch
- https://git.kernel.org/stable/c/2e95350fe9db9d53c701075060ac8ac883b68aee Patch
- https://git.kernel.org/stable/c/5ae1e9922bbdbaeb9cfbe91085ab75927488ac0f Patch
- https://git.kernel.org/stable/c/a0a1db40b23e8ff86dea2786c5ea1470bb23ecb9 Patch
- https://git.kernel.org/stable/c/ab63de24ebea36fe73ac7121738595d704b66d96 Patch
- https://git.kernel.org/stable/c/afec0c5cd2ed71ca95a8b36a5e6d03333bf34282 Patch
- https://git.kernel.org/stable/c/f81e94d2dcd2397137edcb8b85f4c5bed5d22383 Patch
- https://git.kernel.org/stable/c/049d7989c67e8dd50f07a2096dbafdb41331fb9b Patch
- https://git.kernel.org/stable/c/2e95350fe9db9d53c701075060ac8ac883b68aee Patch
- https://git.kernel.org/stable/c/5ae1e9922bbdbaeb9cfbe91085ab75927488ac0f Patch
- https://git.kernel.org/stable/c/a0a1db40b23e8ff86dea2786c5ea1470bb23ecb9 Patch
- https://git.kernel.org/stable/c/ab63de24ebea36fe73ac7121738595d704b66d96 Patch
- https://git.kernel.org/stable/c/afec0c5cd2ed71ca95a8b36a5e6d03333bf34282 Patch
- https://git.kernel.org/stable/c/f81e94d2dcd2397137edcb8b85f4c5bed5d22383 Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
Timeline
- nvd_ingest NVD