Description
In the Linux kernel, the following vulnerability has been resolved: net: remove two BUG() from skb_checksum_help() I have a syzbot report that managed to get a crash in skb_checksum_help() If syzbot can trigger these BUG(), it makes sense to replace them with more friendly WARN_ON_ONCE() since skb_checksum_help() can instead return an error code. Note that syzbot will still crash there, until real bug is fixed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a030847e9f0eed2a080f6114381c649a7aa43d25 to < 312c43e98ed190bd8fd7a71a0addf9539d5b8ab1affecteda030847e9f0eed2a080f6114381c649a7aa43d25 to < 6320ae1b5876c30bf98203b6a5abe8b5c45e6a04affecteda030847e9f0eed2a080f6114381c649a7aa43d25 to < d5281245f3502e960cb6b89348767b935379cee3affecteda030847e9f0eed2a080f6114381c649a7aa43d25 to < b1320c9a4d30ff54b824a8ad6036e0b5fb4c5e73affecteda030847e9f0eed2a080f6114381c649a7aa43d25 to < d7ea0d9df2a6265b2b180d17ebc64b38105968fcaffected
Linux Linux
Default version status: affected
2.6.24affected0 to < 2.6.24unaffected5.10.121 to ≤ 5.10.*unaffected5.15.46 to ≤ 5.15.*unaffected5.17.14 to ≤ 5.17.*unaffected5.18.3 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/312c43e98ed190bd8fd7a71a0addf9539d5b8ab1 ↗
- https://git.kernel.org/stable/c/6320ae1b5876c30bf98203b6a5abe8b5c45e6a04 ↗
- https://git.kernel.org/stable/c/d5281245f3502e960cb6b89348767b935379cee3 ↗
- https://git.kernel.org/stable/c/b1320c9a4d30ff54b824a8ad6036e0b5fb4c5e73 ↗
- https://git.kernel.org/stable/c/d7ea0d9df2a6265b2b180d17ebc64b38105968fc ↗