NetSight
IP …
high7.5

CVE-2024-36929

In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not be…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skb_copy or skb_copy_expand, in order to prevent a crash on a potential later call to skb_gso_segment.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.6 before 5.10.217
from 5.11 before 5.15.159
from 5.16 before 6.1.91
from 6.2 before 6.6.31
from 6.7 before 6.8.10
Version 6.9
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References