In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() I got a syzbot report without a repro [1] crashing in nf_send_…
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() I got a syzbot report without a repro [1] crashing in nf_send_reset6() I think the issue is that dev->hard_header_len is zero, and we attempt later to push an Ethernet header. Use LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c. [1] skbuff: skb_under_panic: text:ffffffff89b1d008 len:74 put:14 head:ffff88803123aa00 data:ffff88803123…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/4ed234fe793f27a3b151c43d2106df2ff0d81aac Patch
- https://git.kernel.org/stable/c/4f7b586aae53c2ed820661803da8ce18b1361921 Patch
- https://git.kernel.org/stable/c/f85b057e34419e5ec0583a65078a11ccc1d4540a Patch
- https://git.kernel.org/stable/c/fef63832317d9d24e1214cdd8f204d02ebdf8499 Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Timeline
- nvd_ingest NVD