In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending ga…
Critical CVSS 9.1
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put() BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/n…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/10210658f827ad45061581cbfc05924b723e8922 Patch
- https://git.kernel.org/stable/c/7a7b5a27c53b55e91eecf646d1b204e73fa4af93 Patch
- https://git.kernel.org/stable/c/7bcbc4cda777d26c88500d973fad0d497fc8a82e Patch
- https://git.kernel.org/stable/c/7ea2bcfd9bf4c3dbbf22546162226fd1c14d8ad2 Patch
- https://git.kernel.org/stable/c/872eca64c3267dbc5836b715716fc6c03a18eda7 Patch
- https://git.kernel.org/stable/c/9c778fe48d20ef362047e3376dee56d77f8500d4 Patch
- https://git.kernel.org/stable/c/af4b8a704f26f38310655bad67fd8096293275a2 Patch
- https://git.kernel.org/stable/c/dcf48ab3ca2c55b09c8f9c8de0df01c1943bc4e5 Patch
- https://git.kernel.org/stable/c/fbff87d682e57ddbbe82abf6d0a1a4a36a98afcd Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html Mailing List
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
Timeline
- nvd_ingest NVD