In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsr_init_skb() to allocate larger skb for Re…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsr_init_skb() to allocate larger skb for RedBox case. Indeed, send_hsr_supervision_frame() will add two additional components (struct hsr_sup_tlv and struct hsr_sup_payload) syzbot reported the following crash: skbuff: skb_over_panic: text:ffffffff8afd4b0a len:34 put:6 head:ffff88802ad29e00 data:ffff88802ad29f22 tail:0x144 end:0x140 dev:gr…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/688842f47ee9fb392d1c3a1ced1d21d505b14968 Patch
- https://git.kernel.org/stable/c/a77a45fbadd9c053e8cf3a9ce2e23bcd23819ea6
- https://git.kernel.org/stable/c/af8edaeddbc52e53207d859c912b017fd9a77629 Patch
- https://git.kernel.org/stable/c/e6773b7da5ecb11ef8e95b50145fd963e326e0f1
Timeline
- nvd_ingest NVD