CVE-2024-56372

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description A vulnerability in the Linux kernel has been resolved, specifically in the net: tun: fix tun napi alloc frags() function. The issue was reported by syzbot and caused a crash due to a malformed skb. The vulnerability is related to the tun napi alloc frags() function, which is used in the network stack. The estimated number of potentially affected devices is not specified.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the tun module until a patch is available. Restrict access to the vulnerable tun interface to minimize the risk of exploitation. Avoid using the tun interface in the affected API endpoints until the issue is resolved.