CVE-2024-26707

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10

Description A vulnerability has been resolved in the Linux kernel. The issue was reported by Syzkaller after it hit a warning when failing to allocate resources for skb in hsr init skb(). To address this, the WARN ONCE() call in send hsr supervision frame() has been removed and replaced with netdev warn once() to suppress similar syzkaller reports. The same change has been applied to send prp supervision frame() for similar reasons. This issue is also found in older kernels, at least up to version 5.10.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.