ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.114, 6.18.24, 6.19.14
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() We need to check __in6_dev_get() for possible NULL value, as suggested by Yiming Qian. Also add skb_dst_dev_rcu() instead of skb_dst_dev(), and two missing READ_ONCE(). Note that @dev can't be NULL.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 · fixed in 34b8390ac0ba57004b90ea568ac06f50bf896a80; From 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 · fixed in f87aa5d1a7f56727a768757613a303b4245444a1; From 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 · fixed in 4198aab6f000b4febb18ea820fea20634dd789c7; From 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 · fixed in 3719c234fa94c37c955b1ecd3742ef280ec135e6; From 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 · fixed in 4e65a8b8daa18d63255ec58964dd192c7fdd9f8b
- Linux Linux
5.15
- KernelLinux
From 5.15.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.114; From 6.13.0 · fixed in 6.18.24; From 6.19.0 · fixed in 6.19.14