In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0
Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-docUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade perfUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extra | Sep 26, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernelUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headers | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.79-99.164Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perf | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-debug-modules-extra | Oct 2, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azure | Aug 8, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-genericUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04 | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub