CVE-2024-57802

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The issue occurs because the skb buffer is too small, and its actual allocation is aligned, hiding the fact that nr route frame does not validate the buffer size before using it. This can be fixed by checking skb->len before accessing any fields in skb->data. The vulnerability was found by the Linux Verification Center with Syzkaller.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider restricting access to the vulnerable nr route frame function until a patch is available.