Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE packets while the service connection is still in RXRPC_CONN_SERVICE_CHALLENGING. Check that state under state_lock before running response verification and security initialization, then use a local secured flag to decide whether to queue the secured-connection work after the state transition. This keeps duplicate or late RESPONSE packets from re-running the setup path and removes the unlocked post-transition state test.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
17926a79320afa9b95df6b977b40cca6d8713cea to < a1a8efde03a40b6c658d580e96644d9b9a2a0d3aaffected17926a79320afa9b95df6b977b40cca6d8713cea to < 6c3a0fbdafef8316e34ae22333e317a341e737cdaffected17926a79320afa9b95df6b977b40cca6d8713cea to < 0afdfd4941c1b60a1f5c361760daa970edca60cdaffected17926a79320afa9b95df6b977b40cca6d8713cea to < a6bcf8010af093fe04f7100562e9542ab7882585affected17926a79320afa9b95df6b977b40cca6d8713cea to < 29b44d904dceb832be880def08b8cb17a0aba91caffected17926a79320afa9b95df6b977b40cca6d8713cea to < d0035e634dae83237ab7f5681eb52b2f65d0ceb8affected17926a79320afa9b95df6b977b40cca6d8713cea to < 03fd2ef73cb4ffd0af100a95b634af54f474414eaffected17926a79320afa9b95df6b977b40cca6d8713cea to < c43ffdcfdbb5567b1f143556df8a04b4eeea041caffected
Linux Linux
Default version status: affected
2.6.22affected0 to < 2.6.22unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.136 to ≤ 6.6.*unaffected6.12.84 to ≤ 6.12.*unaffected6.18.23 to ≤ 6.18.*unaffected6.19.13 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a1a8efde03a40b6c658d580e96644d9b9a2a0d3a ↗
- https://git.kernel.org/stable/c/6c3a0fbdafef8316e34ae22333e317a341e737cd ↗
- https://git.kernel.org/stable/c/0afdfd4941c1b60a1f5c361760daa970edca60cd ↗
- https://git.kernel.org/stable/c/a6bcf8010af093fe04f7100562e9542ab7882585 ↗
- https://git.kernel.org/stable/c/29b44d904dceb832be880def08b8cb17a0aba91c ↗
- https://git.kernel.org/stable/c/d0035e634dae83237ab7f5681eb52b2f65d0ceb8 ↗
- https://git.kernel.org/stable/c/03fd2ef73cb4ffd0af100a95b634af54f474414e ↗
- https://git.kernel.org/stable/c/c43ffdcfdbb5567b1f143556df8a04b4eeea041c ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗