Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF. We can remove rcu_read_lock()/rcu_read_unlock() pairs from ip6_finish_output2().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 4549ce1057363c8dc072f40c6aa591c279eafed2affected4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 423895685f367b5a0a956bd14b02df0192bded4caffected4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 92803b826e40e49a5e8a6e208f4b4574e9d19426affected4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 0393f85c3241c19ba8550f04a812e7d19f6b3082affected4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 11709573cc4e48dc34c80fc7ab9ce5b159e29695affected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.17.3 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4549ce1057363c8dc072f40c6aa591c279eafed2 ↗
- https://git.kernel.org/stable/c/423895685f367b5a0a956bd14b02df0192bded4c ↗
- https://git.kernel.org/stable/c/92803b826e40e49a5e8a6e208f4b4574e9d19426 ↗
- https://git.kernel.org/stable/c/0393f85c3241c19ba8550f04a812e7d19f6b3082 ↗
- https://git.kernel.org/stable/c/11709573cc4e48dc34c80fc7ab9ce5b159e29695 ↗