NetSight
IP …
medium6.2

CVE-2024-50251

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access …

Impact

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON(). skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.5 before 4.19.323
from 4.20 before 5.4.285
from 5.5 before 5.10.229
from 5.11 before 5.15.171
from 5.16 before 6.1.116
from 6.2 before 6.6.60

References