In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip6erspan_rcv() [1] Issue is that ip6ersp…
High CVSS 7.3
Summary
In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip6erspan_rcv() [1] Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it. Add the missing pskb_may_pull() calls. v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed. [1] BUG: KMS…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/06a939f72a24a7d8251f84cf4c042df86c6666ac Patch
- https://git.kernel.org/stable/c/0ac328a5a4138a6c03dfc3f46017bd5c19167446 Patch
- https://git.kernel.org/stable/c/17af420545a750f763025149fa7b833a4fc8b8f0 Patch
- https://git.kernel.org/stable/c/1db7fcb2b290c47c202b79528824f119fa28937d Patch
- https://git.kernel.org/stable/c/4e3fdeecec5707678b0d1f18c259dadb97262e9d Patch
- https://git.kernel.org/stable/c/b14b9f9503ec823ca75be766dcaeff4f0bfeca85 Patch
- https://git.kernel.org/stable/c/e54a0c79cdc2548729dd7e2e468b08c5af4d0df5 Patch
- https://git.kernel.org/stable/c/ee0088101beee10fa809716d6245d915b09c37c7 Patch
- https://git.kernel.org/stable/c/06a939f72a24a7d8251f84cf4c042df86c6666ac Patch
- https://git.kernel.org/stable/c/0ac328a5a4138a6c03dfc3f46017bd5c19167446 Patch
- https://git.kernel.org/stable/c/17af420545a750f763025149fa7b833a4fc8b8f0 Patch
- https://git.kernel.org/stable/c/1db7fcb2b290c47c202b79528824f119fa28937d Patch
- https://git.kernel.org/stable/c/4e3fdeecec5707678b0d1f18c259dadb97262e9d Patch
- https://git.kernel.org/stable/c/b14b9f9503ec823ca75be766dcaeff4f0bfeca85 Patch
- https://git.kernel.org/stable/c/e54a0c79cdc2548729dd7e2e468b08c5af4d0df5 Patch
- https://git.kernel.org/stable/c/ee0088101beee10fa809716d6245d915b09c37c7 Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD