Description
In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths br_nd_send() walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLADDR option payload. Validate option lengths against the remaining NS option area before advancing, and only read source LLADDR when the option is large enough for an Ethernet address.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ed842faeb2bd49256f00485402f3113205f91d30 to < 82a42eceec7c6bdb0e0da94c0542a173b7ea57f2affecteded842faeb2bd49256f00485402f3113205f91d30 to < 259466f76f5a2148aff11134e68f4b4c6d52725baffecteded842faeb2bd49256f00485402f3113205f91d30 to < ee02d8991fd7bd86ed6ebd0deb4aab53feb0e43aaffecteded842faeb2bd49256f00485402f3113205f91d30 to < e0bfd6d4dc77ab345b6c65eef0cfe9b2f69085aaaffecteded842faeb2bd49256f00485402f3113205f91d30 to < c49b9256bbacb6a135654aebd12e4c0e87166b7caffecteded842faeb2bd49256f00485402f3113205f91d30 to < 837392a38445729c22e03d3abcf33f07763efd85affecteded842faeb2bd49256f00485402f3113205f91d30 to < e71303a9190496136e240c4f2872b7b0b16027a7affecteded842faeb2bd49256f00485402f3113205f91d30 to < 850837965af15707fd3142c1cf3c5bfaf022299baffected
Linux Linux
Default version status: affected
4.15affected0 to < 4.15unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.168 to ≤ 6.1.*unaffected6.6.134 to ≤ 6.6.*unaffected6.12.81 to ≤ 6.12.*unaffected6.18.22 to ≤ 6.18.*unaffected6.19.12 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/82a42eceec7c6bdb0e0da94c0542a173b7ea57f2 ↗
- https://git.kernel.org/stable/c/259466f76f5a2148aff11134e68f4b4c6d52725b ↗
- https://git.kernel.org/stable/c/ee02d8991fd7bd86ed6ebd0deb4aab53feb0e43a ↗
- https://git.kernel.org/stable/c/e0bfd6d4dc77ab345b6c65eef0cfe9b2f69085aa ↗
- https://git.kernel.org/stable/c/c49b9256bbacb6a135654aebd12e4c0e87166b7c ↗
- https://git.kernel.org/stable/c/837392a38445729c22e03d3abcf33f07763efd85 ↗
- https://git.kernel.org/stable/c/e71303a9190496136e240c4f2872b7b0b16027a7 ↗
- https://git.kernel.org/stable/c/850837965af15707fd3142c1cf3c5bfaf022299b ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗