Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON(). skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < a661ed364ae6ae88c2fafa9ddc27df1af2a73701affected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534affected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < e3e608cbad376674d19a71ccd0d41804d9393f02affected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < b1d2de8a669fa14c499a385e056944d5352b3b40affected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < d3217323525f7596427124359e76ea0d8fcc9874affected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < 0ab3be58b45b996764aba0187b46de19b3e58a72affected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < c43e0ea848e7b9bef7a682cbc5608022d6d29d7baffected7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to < d5953d680f7e96208c29ce4139a0e38de87a57feaffected
Linux Linux
Default version status: affected
4.5affected0 to < 4.5unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.229 to ≤ 5.10.*unaffected5.15.171 to ≤ 5.15.*unaffected6.1.116 to ≤ 6.1.*unaffected6.6.60 to ≤ 6.6.*unaffected6.11.7 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a661ed364ae6ae88c2fafa9ddc27df1af2a73701 ↗
- https://git.kernel.org/stable/c/ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534 ↗
- https://git.kernel.org/stable/c/e3e608cbad376674d19a71ccd0d41804d9393f02 ↗
- https://git.kernel.org/stable/c/b1d2de8a669fa14c499a385e056944d5352b3b40 ↗
- https://git.kernel.org/stable/c/d3217323525f7596427124359e76ea0d8fcc9874 ↗
- https://git.kernel.org/stable/c/0ab3be58b45b996764aba0187b46de19b3e58a72 ↗
- https://git.kernel.org/stable/c/c43e0ea848e7b9bef7a682cbc5608022d6d29d7b ↗
- https://git.kernel.org/stable/c/d5953d680f7e96208c29ce4139a0e38de87a57fe ↗
- https://github.com/slavin-ayu/CVE-2024-50251-PoC ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗