Samuel Page

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to the tipc component of the Linux kernel, which has a problem with incorrect input validation. This can lead to a stack overflow when a node receives and processes domain record structs from peer nodes. The function `tipc mon rcv()` is used to receive and process these structs, and it is called from the function `tipc link proto rcv()`, where a 32-bit message data length field is read into a uint16. To prevent bit overflow, an extra sanity check is added to this function. The problem was identified by Eric Dumazet. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.