Description
In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and trigger a KCSAN warning.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < caa064c3c2394d03e289ebd6b0be5102eb8a5b40affectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < 5993f121fbc01dc2d734f0ff2628009b258fb1ddaffectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < 88081ba415224cf413101def4343d660f56d082baffectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < 3266e638ba5cc1165f5e6989eb8c0720f1cc4b41affectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < 54538752216bf89ee88d47ad07802063a498c299affectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < 4a5e31bdd3c1702b520506d9cf8c41085f75c7f2affectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < 307fa8a75ab7423fa5c73573ec3d192de5027830affectedf4713a3dfad045d46afcb9c2a7d0bba288920ed4 to < eef00a82c568944f113f2de738156ac591bbd5cdaffected433337f9c00cac447d020922f59237273f5d92beaffected3.17.7 to < 3.18affected
Linux Linux
Default version status: affected
3.18affected0 to < 3.18unaffected4.19.307 to ≤ 4.19.*unaffected5.4.269 to ≤ 5.4.*unaffected5.10.210 to ≤ 5.10.*unaffected5.15.149 to ≤ 5.15.*unaffected6.1.78 to ≤ 6.1.*unaffected6.6.17 to ≤ 6.6.*unaffected6.7.5 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40 ↗
- https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd ↗
- https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b ↗
- https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41 ↗
- https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299 ↗
- https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2 ↗
- https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830 ↗
- https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗