Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 4ec216410fac9de83c99177a160ebb8d42fad075affected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 09883bf257f4243ed5a1fd35078ec6f0d0f3696aaffected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 761b45c661af48da6a065868d59ab1e1f64fd9b6affected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 607245c4dbb86d9a10dd8388da0fb82170a99b61affected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 6b419700e459fbf707ca1543b7c1b57a60fedb73affected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 88a8f56e6276f616baad4274c6b8e4683e26e520affected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < f08ffa3e1c8e36b6131f69c5eb23700c28cbd262affected9dfa1dfe4d5e5e66a991321ab08afe69759d797a to < 6d52a4a0520a6696bdde51caa11f2d6821cd0c01affected3a758a2b78da2f49f7165678faf999e946a0c4b5affected131172845aa2c804ffa9423455aee585061ea35eaffectedb1fef6b81871a396f3b8702077333e769673c87baffectedadd9183d993c12fb61ce0a674a424341d5be5b36affected3.10.61 to < 3.11affected3.12.34 to < 3.13affected3.14.25 to < 3.15affected3.17.4 to < 3.18affected
Linux Linux
Default version status: affected
3.18affected0 to < 3.18unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.168 to ≤ 6.1.*unaffected6.6.134 to ≤ 6.6.*unaffected6.12.81 to ≤ 6.12.*unaffected6.18.22 to ≤ 6.18.*unaffected6.19.12 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4ec216410fac9de83c99177a160ebb8d42fad075 ↗
- https://git.kernel.org/stable/c/09883bf257f4243ed5a1fd35078ec6f0d0f3696a ↗
- https://git.kernel.org/stable/c/761b45c661af48da6a065868d59ab1e1f64fd9b6 ↗
- https://git.kernel.org/stable/c/607245c4dbb86d9a10dd8388da0fb82170a99b61 ↗
- https://git.kernel.org/stable/c/6b419700e459fbf707ca1543b7c1b57a60fedb73 ↗
- https://git.kernel.org/stable/c/88a8f56e6276f616baad4274c6b8e4683e26e520 ↗
- https://git.kernel.org/stable/c/f08ffa3e1c8e36b6131f69c5eb23700c28cbd262 ↗
- https://git.kernel.org/stable/c/6d52a4a0520a6696bdde51caa11f2d6821cd0c01 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗