In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such function call returns, the sk must not be released. This affects skb fragments reassembled via netfilter or similar modules, e.g. openvswitch or ct_act.c, when run as part of tx pipeline. Eric Dumazet made an initial analysis of this b…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/18685451fc4e546fc0e718580d32df3c0e5c8272 Patch
- https://git.kernel.org/stable/c/1b6de5e6575b56502665c65cf93b0ae6aa0f51ab Patch
- https://git.kernel.org/stable/c/4318608dc28ef184158b4045896740716bea23f0 Patch
- https://git.kernel.org/stable/c/7d0567842b78390dd9b60f00f1d8f838d540e325 Patch
- https://git.kernel.org/stable/c/9705f447bf9a6cd088300ad2c407b5e1c6591091 Patch
- https://git.kernel.org/stable/c/e09cbe017311508c21e0739e97198a8388b98981 Patch
- https://git.kernel.org/stable/c/f4877225313d474659ee53150ccc3d553a978727 Patch
- https://git.kernel.org/stable/c/18685451fc4e546fc0e718580d32df3c0e5c8272 Patch
- https://git.kernel.org/stable/c/7d0567842b78390dd9b60f00f1d8f838d540e325 Patch
- https://git.kernel.org/stable/c/e09cbe017311508c21e0739e97198a8388b98981 Patch
- https://git.kernel.org/stable/c/f4877225313d474659ee53150ccc3d553a978727 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Timeline
- nvd_ingest NVD