PT-2024-33820
CVE-2024-49978
·
تاريخ النشر
2024-10-21
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue concerns the Linux kernel, where a vulnerability has been resolved related to the handling of UDP GSO fraglist segmentation after data is pulled from the frag list. This occurs when optional datapath hooks, such as NAT and BPF, modify SKBs, breaking their invariants. In extreme cases, this can cause a NULL pointer dereference. The fix involves detecting SKBs with corrupted geometry and passing them to skb segment instead of skb segment list.
Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the use of optional datapath hooks such as NAT and BPF to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾