netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.18.57, 7.1.5
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Update nft_dup and nft_fwd to use the nf_dev_xmit_recursion() helpers. This patch also disables BH when transmitting the skb to address a possible migration to different CPU leading to imbalanced decrementation of the recursion counters. This is modeled after Florian Westphal's dev_xmit_recursion*() API available since commit 97cdcf37b57e ("net: place xmit recursion in softnet data") according to its current state in the tree.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From f37ad91270397a6d053e8623bdb3cf79859691d2 · fixed in 53fb46cf933dc4361c1a72491e247841d0b0fc85; From f37ad91270397a6d053e8623bdb3cf79859691d2 · fixed in edf234f71fb327792196f813048ab8f5bd3bb712; From f37ad91270397a6d053e8623bdb3cf79859691d2 · fixed in 2354e975932dabb06fad239f07a3b68fd1809737
- Linux Linux
6.16
- KernelLinux
From 6.16.0 · fixed in 6.18.57; From 6.19.0 · fixed in 7.1.5