In the Linux kernel, the following vulnerability has been resolved:
netfilter: synproxy: Fix out of bounds when parsing TCP options
The TCP option parser in synproxy (synproxy_parse_options) could read one byte out of bounds. When the length is 1, the execution flow gets into the loop, reads one byte of the opcode, and if the opcode is neither TCPOPT_EOL nor TCPOPT_NOP, it reads one more byte, which exceeds the length of 1.
This fix is inspired by commit 9609dad263f8 ("ipv4: tcp_input: fix stack out of bounds when parsing TCP options.").
v2 changes:
Added an early return when length < 0 to avoid calling skb_header_pointer with negative length.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-4.14.238-182.421Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Mar 14, 2025 | May 21, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 14, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-docs | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-268-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-4.4.0-1143-awsUpgrade linux-image-4.4.0-268-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1181-awsUpgrade linux-image-lowlatencyUpgrade linux-image-virtual | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub