In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sorted list of received fragments for a partial datagr…
High CVSS 8.8
Summary
In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sorted list of received fragments for a partial datagram. When a new fragment is adjacent to an existing fragment, the code checks whether the new fragment also closes the gap to the next or previous list entry. Those neighbor lookups currently assume that the current fragment always has a real next or previous fragment. At a list edge, the next or pr…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0177e578d7a885037b0fb82286c12e9d0360cc10
- https://git.kernel.org/stable/c/22e05b8ddbcf7d22c7f1598786e86635547e554d
- https://git.kernel.org/stable/c/2a5aa4e9b89227d1a1690fb8d5b81e5f3b261999
- https://git.kernel.org/stable/c/b7d633c7c92321be98724b1d365e8ce507f2f349
- https://git.kernel.org/stable/c/d52a13adbb8ccbab99cd3bad36804e87d8b5c052
Timeline
- nvd_ingest NVD