CVE-2024-50033

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A vulnerability has been resolved in the Linux kernel, specifically in the slhc remember() function, which was found to be missing checks against malicious packets. The function only checked if the packet size was at least 20, which is not sufficient. To fix this, the code now includes checks to ensure the packet includes the IPv4 and TCP headers that are supposed to be carried. The slhc remember() function has been made more robust against malicious packets.

Recommendations: To resolve the issue, update the Linux kernel to version 6.6.58 or later. As a temporary workaround, consider restricting access to the slhc remember() function until a patch is available.