In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0
Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-rt | Sep 26, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-livepatch-5.10.210-201.852Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftool | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-headers | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade python3-perf | Oct 2, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-syms-rt | Aug 8, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-genericUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azureUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.5 | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub