Sashiko Ai-Review

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A flaw exists in the IPv6 ICMP error generation process. A remote attacker can send a specially crafted IPv4 ICMP error packet containing a Common Internet Protocol Security Option (CIPSO) IP option. This causes the system to incorrectly interpret IPv4 packet control block data as IPv6 data within the `ip6 err gen icmpv6 unreach()` function. Specifically, the CIPSO offset overlaps with the `dsthao` variable in the `inet6 skb parm` structure. This can lead the `mip6 addr swap()` function to perform an out-of-bounds memory access when scanning the packet for a Type-Length-Value (TLV) structure, potentially resulting in information disclosure or a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.