In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can change skb->head. Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF. Use instead ip_hdr(skb) as done in drivers/net/bareudp.c and drivers/net/geneve.c. Found by Sashiko.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 5.9CNA affecteddefault affected | |
| Linux | Linux | >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < 5303925e360527243b46a440a04667826bbc72b7, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < 609e63312c29aad18026a1d3222e123d4b6b0feb, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < 6b8bfce9d2f774d2c2243e0248e03efb99bba6c0, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < 7d9ef0cb271555d8cf39fefe6c981e1493b25ecf, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < 8d435d68d71fb875876b722f4136caf74f2f48bd, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < 9257f56ac47ef1976bcd056cf986a9988eeec67a, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < a493efd4336cf19122ae0e4cbb3d31b32d70deea, >= 4cb47a8644cc9eb8ec81190a50e79e6530d0297f, < dc3bfa050f873371e745bdf478b1f5b738e5733dCNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.