In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Ca…
高危 CVSS 8.6
摘要
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Call pskb_inet_may_pull() to fix this, and initialize ipv6h variable after this call as it can change skb->head. [1] BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] BUG: KMSA…
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 Mailing List
- https://git.kernel.org/stable/c/8d975c15c0cd744000ca386247432d57b21f9df0 Mailing List
- https://git.kernel.org/stable/c/a9bc32879a08f23cdb80a48c738017e39aea1080 Mailing List
- https://git.kernel.org/stable/c/af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 Mailing List
- https://git.kernel.org/stable/c/c835df3bcc14858ae9b27315dd7de76370b94f3a Mailing List
- https://git.kernel.org/stable/c/d54e4da98bbfa8c257bdca94c49652d81d18a4d8 Mailing List
- https://git.kernel.org/stable/c/350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 Mailing List
- https://git.kernel.org/stable/c/8d975c15c0cd744000ca386247432d57b21f9df0 Mailing List
- https://git.kernel.org/stable/c/a9bc32879a08f23cdb80a48c738017e39aea1080 Mailing List
- https://git.kernel.org/stable/c/af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 Mailing List
- https://git.kernel.org/stable/c/c835df3bcc14858ae9b27315dd7de76370b94f3a Mailing List
- https://git.kernel.org/stable/c/d54e4da98bbfa8c257bdca94c49652d81d18a4d8 Mailing List
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
- https://security.netapp.com/advisory/ntap-20241108-0008/ Third Party Advisory
时间线
- nvd_ingest NVD