Description
In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net() does not set the netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0). Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel) correctly set this flag during their fallback device initialization to prevent them from being moved to another network namespace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
61220ab349485d911083d0b7990ccd3db6c63297 to < 12acc977838c943636fb01e2f3087d2e4cc3b7ccaffected61220ab349485d911083d0b7990ccd3db6c63297 to < 7f28e3948c59481f8db9c9638e204258d26b4e41affected61220ab349485d911083d0b7990ccd3db6c63297 to < 12c65e2c7fef507551bd7b52123598a761662c01affected61220ab349485d911083d0b7990ccd3db6c63297 to < f4b6b4af7ef0661ac153c6f7eb1030aa8482c1a3affected61220ab349485d911083d0b7990ccd3db6c63297 to < c5dbd669db5a426b3025512322e1bf2cdbe14305affected61220ab349485d911083d0b7990ccd3db6c63297 to < ecf8904067dcba0dad86ece80874841e60317885affected61220ab349485d911083d0b7990ccd3db6c63297 to < dcdce3bc9f08026ff3739ee7339e1bef526fc5f3affected61220ab349485d911083d0b7990ccd3db6c63297 to < d289d5307762d1838aaece22c6b6fcad9e8865f9affected
Linux Linux
Default version status: affected
3.15affected0 to < 3.15unaffected5.10.260 to ≤ 5.10.*unaffected5.15.211 to ≤ 5.15.*unaffected6.1.177 to ≤ 6.1.*unaffected6.6.144 to ≤ 6.6.*unaffected6.12.95 to ≤ 6.12.*unaffected6.18.36 to ≤ 6.18.*unaffected7.0.13 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/12acc977838c943636fb01e2f3087d2e4cc3b7cc ↗
- https://git.kernel.org/stable/c/7f28e3948c59481f8db9c9638e204258d26b4e41 ↗
- https://git.kernel.org/stable/c/12c65e2c7fef507551bd7b52123598a761662c01 ↗
- https://git.kernel.org/stable/c/f4b6b4af7ef0661ac153c6f7eb1030aa8482c1a3 ↗
- https://git.kernel.org/stable/c/c5dbd669db5a426b3025512322e1bf2cdbe14305 ↗
- https://git.kernel.org/stable/c/ecf8904067dcba0dad86ece80874841e60317885 ↗
- https://git.kernel.org/stable/c/dcdce3bc9f08026ff3739ee7339e1bef526fc5f3 ↗
- https://git.kernel.org/stable/c/d289d5307762d1838aaece22c6b6fcad9e8865f9 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗