The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd.…
高危 CVSS 7.8
摘要
The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
Lint 边界警告 (2)
以下是本次研判 lint 阶段发现的非阻塞性警告(如引用 URL 未在白名单内)。这些不影响漏洞条目可用性,仅为透明度披露(参 DR-002)。
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://syzkaller.appspot.com/bug?id=96e7d345748d8814901c91cd92084ed04b46701e -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://syzkaller.appspot.com/bug?id=96e7d345748d8814901c91cd92084ed04b46701e
数据来源
- NVD DATABASE
原始链接
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.14 Mailing List
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7 Mailing List
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8 Mailing List
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad5d07f4a9cd671233ae20983848874731102c08 Mailing List
- https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-cipso_v4_genopt Exploit
- https://syzkaller.appspot.com/bug?id=96e7d345748d8814901c91cd92084ed04b46701e Exploit
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.14 Mailing List
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7 Mailing List
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8 Mailing List
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad5d07f4a9cd671233ae20983848874731102c08 Mailing List
- https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-cipso_v4_genopt Exploit
- https://syzkaller.appspot.com/bug?id=96e7d345748d8814901c91cd92084ed04b46701e Exploit
时间线
- nvd_ingest NVD