CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error
In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
If the ICMPv6 error is built from a non-linear skb we get the following splat,
BUG: KASAN: slab-out-of-bounds in docsum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasanreport+0xd8/0x110 docsum+0x220/0x240 csumpartial+0xc/0x20 skbtunnelcheckpmtu+0xeb9/0x3280 vxlanxmitone+0x14c2/0x4080 vxlanxmit+0xf61/0x5c00 devhardstartxmit+0xfb/0x510 devqueuexmit+0x7cd/0x32a0 brdevqueuepushxmit+0x39d/0x6a0
Use skbchecksum instead of csumpartial who cannot deal with non-linear SKBs.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
tunnels: fix out of bounds access when building IPv6 PMTU error
The Linux kernel CVE team has assigned CVE-2024-26665 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040224-CVE-2024-26665-5daa@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26665?
CVE-2024-26665 is classified as a high-severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2024-26665?
To remediate CVE-2024-26665, update the Linux kernel to version 5.10.210, 5.15.149, 6.1.78, 6.6.17, 6.7.5, 6.8, or any patched version provided by your Linux distribution.
What are the affected versions for CVE-2024-26665?
CVE-2024-26665 affects Linux kernel versions prior to 5.10.210, 5.15.149, 6.1.78, 6.6.17, 6.7.5, and 6.8.
What type of access issue is associated with CVE-2024-26665?
CVE-2024-26665 is associated with an out-of-bounds access vulnerability that can occur when building IPv6 PMTU errors.
Which software distributions are impacted by CVE-2024-26665?
CVE-2024-26665 impacts software distributions including Red Hat and Debian that utilize the affected versions of the Linux kernel.