Description
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to < 96fc896d0e5b37c12808df797397fb16f3080879affectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1affectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < b870256dd2a5648d5ed2f22316b3ac29a7e5ed63affectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < 3c2d705f5adf5d860aaef90cb4211c0fde2ba66daffectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < 9e0ec817eb41a55327a46cd3ce331a9868d60304affectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < bbec88e4108e8d6fb468d3817fa652140a44ff28affectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < cd1065f92eb7ff21b9ba5308a86f33d1670bf926affectedde09334b9326632bbf1a74bfd8b01866cbbf2f61 to < 628e6d18930bbd21f2d4562228afe27694f66da9affected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected5.4.291 to ≤ 5.4.*unaffected5.10.235 to ≤ 5.10.*unaffected5.15.179 to ≤ 5.15.*unaffected6.1.129 to ≤ 6.1.*unaffected6.6.79 to ≤ 6.6.*unaffected6.12.16 to ≤ 6.12.*unaffected6.13.4 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/96fc896d0e5b37c12808df797397fb16f3080879 ↗
- https://git.kernel.org/stable/c/c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1 ↗
- https://git.kernel.org/stable/c/b870256dd2a5648d5ed2f22316b3ac29a7e5ed63 ↗
- https://git.kernel.org/stable/c/3c2d705f5adf5d860aaef90cb4211c0fde2ba66d ↗
- https://git.kernel.org/stable/c/9e0ec817eb41a55327a46cd3ce331a9868d60304 ↗
- https://git.kernel.org/stable/c/bbec88e4108e8d6fb468d3817fa652140a44ff28 ↗
- https://git.kernel.org/stable/c/cd1065f92eb7ff21b9ba5308a86f33d1670bf926 ↗
- https://git.kernel.org/stable/c/628e6d18930bbd21f2d4562228afe27694f66da9 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗