Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets The security operations that verify the RESPONSE packets decrypt bits of it in place - however, the sk_buff may be shared with a packet sniffer, which would lead to the sniffer seeing an apparently corrupt packet (actually decrypted). Fix this by handing a copy of the packet off to the specific security handler if the packet was cloned.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
17926a79320afa9b95df6b977b40cca6d8713cea to < ae19f6a54206534a85830dd92985f5f41441d241affected17926a79320afa9b95df6b977b40cca6d8713cea to < c0428a22daf69714dc042b67ea759956b74c74e5affected17926a79320afa9b95df6b977b40cca6d8713cea to < 98a2046d155f73f6cf5d2c493c5e09b4963e2e12affected17926a79320afa9b95df6b977b40cca6d8713cea to < ca71ac2de389b01eecdc48bfafbdf073ec232044affected17926a79320afa9b95df6b977b40cca6d8713cea to < d9b93a0f57ca5f6831bfaa34014b6cd705564a00affected17926a79320afa9b95df6b977b40cca6d8713cea to < 24481a7f573305706054c59e275371f8d0fe919faffected
Linux Linux
Default version status: affected
2.6.22affected0 to < 2.6.22unaffected6.1.191 to ≤ 6.1.*unaffected6.6.140 to ≤ 6.6.*unaffected6.12.88 to ≤ 6.12.*unaffected6.18.27 to ≤ 6.18.*unaffected7.0.4 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/ae19f6a54206534a85830dd92985f5f41441d241 ↗
- https://git.kernel.org/stable/c/c0428a22daf69714dc042b67ea759956b74c74e5 ↗
- https://git.kernel.org/stable/c/98a2046d155f73f6cf5d2c493c5e09b4963e2e12 ↗
- https://git.kernel.org/stable/c/ca71ac2de389b01eecdc48bfafbdf073ec232044 ↗
- https://git.kernel.org/stable/c/d9b93a0f57ca5f6831bfaa34014b6cd705564a00 ↗
- https://git.kernel.org/stable/c/24481a7f573305706054c59e275371f8d0fe919f ↗