CVE-2024-50256

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: A potential crash in the nf send reset6() function has been resolved. The issue occurs when dev->hard header len is zero, and an attempt is made to push an Ethernet header. The fix involves using LL MAX HEADER as in other functions in net/ipv6/netfilter/nf reject ipv6.c. A syzbot report was received without a repro, crashing in nf send reset6(). The crash is related to the skb under panic and skb panic functions in net/core/skbuff.c.

Recommendations: To resolve the issue, update the Linux kernel to version 6.6.61 or later. As a temporary workaround, consider disabling the nf send reset6() function until a patch is available. Restrict access to the vulnerable net/ipv6/netfilter/nf reject ipv6.c module to minimize the risk of exploitation. Avoid using the dev->hard header len variable in the affected API endpoints until the issue is resolved.