Description
In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd ("net: ip_tunnel: prevent perpetual headroom growth"), ipv6 tunnel yet increases the headroom without any ceiling. Reflect ipv4 tunnel headroom adjustment limit on ipv6 version. Credits to Francesco Ruggeri, who was originally debugging this issue and wrote local Arista-specific patch and a reproducer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8eb30be0352d09165e94a41fef1c7b994dca0714 to < 566f8d5c8a443f2dd69c5460fdec43ed1c870c65affected8eb30be0352d09165e94a41fef1c7b994dca0714 to < 11f6066af3bfb8149aa16c42c0b0c5ea5b199a94affected8eb30be0352d09165e94a41fef1c7b994dca0714 to < 402b6985e872b4cf394bbbf33b503947a326a6cbaffected8eb30be0352d09165e94a41fef1c7b994dca0714 to < 10fe967efe73c610e526ff7460581610633dee9caffected8eb30be0352d09165e94a41fef1c7b994dca0714 to < 48294a67863c9cfa367abb66bbf0ef6548ae124faffected8eb30be0352d09165e94a41fef1c7b994dca0714 to < eeb4345488672584db4f8c20a1ae13a212ce31c4affected8eb30be0352d09165e94a41fef1c7b994dca0714 to < b6eb25d870f1a8ae571fd3da2244b71df547824baffected8eb30be0352d09165e94a41fef1c7b994dca0714 to < 21f4d45eba0b2dcae5dbc9e5e0ad08735c993f16affected
Linux Linux
Default version status: affected
4.7affected0 to < 4.7unaffected5.4.301 to ≤ 5.4.*unaffected5.10.246 to ≤ 5.10.*unaffected5.15.196 to ≤ 5.15.*unaffected6.1.158 to ≤ 6.1.*unaffected6.6.114 to ≤ 6.6.*unaffected6.12.55 to ≤ 6.12.*unaffected6.17.5 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/566f8d5c8a443f2dd69c5460fdec43ed1c870c65 ↗
- https://git.kernel.org/stable/c/11f6066af3bfb8149aa16c42c0b0c5ea5b199a94 ↗
- https://git.kernel.org/stable/c/402b6985e872b4cf394bbbf33b503947a326a6cb ↗
- https://git.kernel.org/stable/c/10fe967efe73c610e526ff7460581610633dee9c ↗
- https://git.kernel.org/stable/c/48294a67863c9cfa367abb66bbf0ef6548ae124f ↗
- https://git.kernel.org/stable/c/eeb4345488672584db4f8c20a1ae13a212ce31c4 ↗
- https://git.kernel.org/stable/c/b6eb25d870f1a8ae571fd3da2244b71df547824b ↗
- https://git.kernel.org/stable/c/21f4d45eba0b2dcae5dbc9e5e0ad08735c993f16 ↗