In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0
Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-modules | Sep 26, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.149-99.161Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.210-201.852Upgrade python-perf-debuginfo | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf | Oct 2, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-docsUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade kernel-symsUpgrade kernel-64kb-livepatch-devel | Aug 8, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-intelUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-genericUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1058-gke | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub