In the Linux kernel, the following vulnerability has been resolved:
l2tp: pass correct message length to ip6_append_data
l2tp_ip6_sendmsg needs to avoid accounting for the transport header twice when splicing more data into an already partially-occupied skbuff.
To manage this, we check whether the skbuff contains data using skb_queue_empty when deciding how much data to append using ip6_append_data.
However, the code which performed the calculation was incorrect:
ulen = len + skb_queue_empty(&sk->sk_write_queue) ? transhdrlen : 0;
...due to C operator precedence, this ends up setting ulen to transhdrlen for messages with a non-zero length, which results in corrupted packets on the wire.
Add parentheses to correct the calculation in line with the original intent.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.343-259.562Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Aug 19, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-docs | Jun 12, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-raspi2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1058-intel-iotg | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub