In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0
Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-tools | Sep 26, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.149-99.161 | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpf-static | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debugUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel | Oct 2, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-debug | Aug 8, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-starfive | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub