Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
72efd585f7144a047f7da63864284764596ccad9 to < d06977b9a4109f8738bb276125eb6a0b772bc433affected72efd585f7144a047f7da63864284764596ccad9 to < 8bf7c76a2a207ca2b4cfda0a279192adf27678d7affected72efd585f7144a047f7da63864284764596ccad9 to < a2471d271042ea18e8a6babc132a8716bb2f08b9affected72efd585f7144a047f7da63864284764596ccad9 to < cf366ee3bc1b7d1c76a882640ba3b3f8f1039163affected72efd585f7144a047f7da63864284764596ccad9 to < 87b3593bed1868b2d9fe096c01bcdf0ea86cbebfaffected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.157 to ≤ 5.15.*unaffected6.1.88 to ≤ 6.1.*unaffected6.6.29 to ≤ 6.6.*unaffected6.8.8 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d06977b9a4109f8738bb276125eb6a0b772bc433 ↗
- https://git.kernel.org/stable/c/8bf7c76a2a207ca2b4cfda0a279192adf27678d7 ↗
- https://git.kernel.org/stable/c/a2471d271042ea18e8a6babc132a8716bb2f08b9 ↗
- https://git.kernel.org/stable/c/cf366ee3bc1b7d1c76a882640ba3b3f8f1039163 ↗
- https://git.kernel.org/stable/c/87b3593bed1868b2d9fe096c01bcdf0ea86cbebf ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/ ↗