ipv4: start using dst_dev_rcu()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.189, 6.6.157, 6.12.106, 6.17.3
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF. Change ipmr_prepare_xmit(), ipmr_queue_fwd_xmit(), ip_mr_output(), ipv4_neigh_lookup() to use lockdep enabled dst_dev_rcu().
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 · fixed in 864155c164654110f68a17a63bd0339754790d67; From 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 · fixed in e150f273cd8ed34ebc6d03758aad95c12fc58337; From 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 · fixed in 684efb2c86c887685f9aa65e1a21b3df6c1f822d; From 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 · fixed in 923e0734c386984d45de508528a7a7ad91d791cc; From 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 · fixed in 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8
- Linux Linux
4.13
- KernelLinux
From 4.13.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.106; From 6.13.0 · fixed in 6.17.3