PT-2024-33873
CVE-2024-50033
·
تاريخ النشر
2024-10-10
·
تاريخ التحديث
2026-10-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A vulnerability has been resolved in the Linux kernel, specifically in the
slhc remember() function, which was found to be missing checks against malicious packets. The function only checked if the packet size was at least 20, which is not sufficient. To fix this, the code now includes checks to ensure the packet includes the IPv4 and TCP headers that are supposed to be carried. The slhc remember() function has been made more robust against malicious packets.Recommendations:
To resolve the issue, update the Linux kernel to version 6.6.58 or later.
As a temporary workaround, consider restricting access to the
slhc remember() function until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾