In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0
Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-devel | Sep 26, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernelUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perf | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Apr 2, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rtUpgrade perf | Oct 2, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-rt-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-devel | Aug 8, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1058-gke | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub