In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or N…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or NETIF_F_HW_VLAN_STAG_TX) on a lower device invokes vlan_transfer_features(), which dynamically changed vlandev->hard_header_len. This causes two issues: 1. Lockless TX paths (e.g. packet_snd in af_packet.c, ip6_finish_output2) read dev->hard_header_len without holding RTNL lock. Mutating hard_…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1517d1996b5236fe69eccd9d253f725e06996eb1
- https://git.kernel.org/stable/c/447cbe95ebb95392b5d8f6a01c0556826919ce23
- https://git.kernel.org/stable/c/a29f3b884ba50217e6f50414f568073221e2bb07
- https://git.kernel.org/stable/c/b30fe4de285b9bdaf9508740191f69f7cd83b8fa
Timeline
- nvd_ingest NVD