Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
72efd585f7144a047f7da63864284764596ccad9 to < e719b52d0c56989b0f3475a03a6d64f182c85b56affected72efd585f7144a047f7da63864284764596ccad9 to < f1c3c61701a0b12f4906152c1626a5de580ea3d2affected72efd585f7144a047f7da63864284764596ccad9 to < 4ed82dd368ad883dc4284292937b882f044e625daffected72efd585f7144a047f7da63864284764596ccad9 to < e3f078103421642fcd5f05c5e70777feb10f000daffected72efd585f7144a047f7da63864284764596ccad9 to < 6db5dc7b351b9569940cd1cf445e237c42cd6d27affected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.157 to ≤ 5.15.*unaffected6.1.88 to ≤ 6.1.*unaffected6.6.29 to ≤ 6.6.*unaffected6.8.8 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e719b52d0c56989b0f3475a03a6d64f182c85b56 ↗
- https://git.kernel.org/stable/c/f1c3c61701a0b12f4906152c1626a5de580ea3d2 ↗
- https://git.kernel.org/stable/c/4ed82dd368ad883dc4284292937b882f044e625d ↗
- https://git.kernel.org/stable/c/e3f078103421642fcd5f05c5e70777feb10f000d ↗
- https://git.kernel.org/stable/c/6db5dc7b351b9569940cd1cf445e237c42cd6d27 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/ ↗