In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb->sk association installed by bpf_sk_as…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb->sk association installed by bpf_sk_assign() so that local delivery can use the selected socket under RCU. Both address families can also prefetch a socket in UDP early demux. In both paths (BPF and UDP early demux) a reference is not guaranteed to be held on the socket. When a multicast packet is not locally deliverable, IPv6 hands th…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/a8af6fbac895f057c4b8ff8a2e3fb4c5827fe4ce
- https://git.kernel.org/stable/c/e36ce6e78fe3fc3c071a26750783b7ba081ce10d
- https://git.kernel.org/stable/c/e62aef7d6a5b27569bf540bbe11a9482117ff588
- https://git.kernel.org/stable/c/f1281d4b99089fbaf0d3579bba62a814ebb4de4d
Timeline
- nvd_ingest NVD