Description
The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://marc.info/?l=linux-kernel&m=150394500728906&w=2 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1492593 ↗
- http://seclists.org/oss-sec/2017/q3/476 ↗
- http://www.securitytracker.com/id/1039371 ↗
- http://www.securityfocus.com/bid/100871 ↗
- https://source.android.com/security/bulletin/2018-01-01 ↗
- http://www.debian.org/security/2017/dsa-3981 ↗
- https://github.com/torvalds/linux/commit/edbd58be15a957f6a760c4a514cd475217eb97fd ↗
- https://marc.info/?t=150394517700001&r=1&w=2 ↗
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edbd58be15a957f6a760c4a514cd475217eb97fd ↗
- http://www.securitytracker.com/id/1040106 ↗