In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0
Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extra | Sep 26, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf | Oct 2, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optional | Aug 8, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.5 | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub