Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Reject rt match rules whose addrnr exceeds IP6T_RT_HOPS. rt_mt6() expects addrnr to stay within the bounds of rtinfo->addrs[]. Validate addrnr during rule installation so malformed rules are rejected before the match logic can use an out-of-range value.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 13e3e30ed3b5b67cc1db2bd58a5d09b0f07debfaaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < af9b7e2b765966457f4ec23be5bd34a141f89574affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 29ea965a1353bc8303877422f79c8211e9ba9c55affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c6a503a9f4debc654e3a6a7ca1f7fce6a9953c59affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ded71f5684df16fa645cca5bf4fe6b0cd8a46119affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d8795fde1f78669a87c87ac29fceab2f104daa8caffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a28ebf6f99de270d6338ccdc3b49f3e818f99b7baffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9d3f027327c2fa265f7f85ead41294792c3296edaffected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.168 to ≤ 6.1.*unaffected6.6.131 to ≤ 6.6.*unaffected6.12.80 to ≤ 6.12.*unaffected6.18.21 to ≤ 6.18.*unaffected6.19.11 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/13e3e30ed3b5b67cc1db2bd58a5d09b0f07debfa ↗
- https://git.kernel.org/stable/c/af9b7e2b765966457f4ec23be5bd34a141f89574 ↗
- https://git.kernel.org/stable/c/29ea965a1353bc8303877422f79c8211e9ba9c55 ↗
- https://git.kernel.org/stable/c/c6a503a9f4debc654e3a6a7ca1f7fce6a9953c59 ↗
- https://git.kernel.org/stable/c/ded71f5684df16fa645cca5bf4fe6b0cd8a46119 ↗
- https://git.kernel.org/stable/c/d8795fde1f78669a87c87ac29fceab2f104daa8c ↗
- https://git.kernel.org/stable/c/a28ebf6f99de270d6338ccdc3b49f3e818f99b7b ↗
- https://git.kernel.org/stable/c/9d3f027327c2fa265f7f85ead41294792c3296ed ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗