Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause problems with apps over IPv6. As for the only official app in the kernel tree (FTP) this problem is harmless because we use Netfilter to mangle the FTP ports and we do not adjust the TCP seq numbers. Also, provide correct offset of the ICMPV6 header in ip_vs_out_icmp_v6() for correct checksum checks when the IPv6 packet has extension headers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2a3b791e6e1169f374224d164738e9f7be703d77 to < 613ce63711b8d431bba90781f133c39a21684f87affected2a3b791e6e1169f374224d164738e9f7be703d77 to < 95d4511d81b2b37e5d2bdde5d912e48243eae517affected2a3b791e6e1169f374224d164738e9f7be703d77 to < 3a9dc9b55b53d94613a587604b77d3b20024090caffected2a3b791e6e1169f374224d164738e9f7be703d77 to < a3f0d5b605cd5da5c95279969fb8cea4e55cee5baffected2a3b791e6e1169f374224d164738e9f7be703d77 to < 7350eb7ead172ae8024897d4b0f2e15c5318279caffected2a3b791e6e1169f374224d164738e9f7be703d77 to < d4ec18f48ce78a3bf7c999ac908691007375fe99affected2a3b791e6e1169f374224d164738e9f7be703d77 to < 905d7a363ade96a19f214815361e11981142c547affected2a3b791e6e1169f374224d164738e9f7be703d77 to < b3fe4cbd583895987935a9bdad01c8f9d3a02310affected
Linux Linux
Default version status: affected
2.6.28affected0 to < 2.6.28unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/613ce63711b8d431bba90781f133c39a21684f87 ↗
- https://git.kernel.org/stable/c/95d4511d81b2b37e5d2bdde5d912e48243eae517 ↗
- https://git.kernel.org/stable/c/3a9dc9b55b53d94613a587604b77d3b20024090c ↗
- https://git.kernel.org/stable/c/a3f0d5b605cd5da5c95279969fb8cea4e55cee5b ↗
- https://git.kernel.org/stable/c/7350eb7ead172ae8024897d4b0f2e15c5318279c ↗
- https://git.kernel.org/stable/c/d4ec18f48ce78a3bf7c999ac908691007375fe99 ↗
- https://git.kernel.org/stable/c/905d7a363ade96a19f214815361e11981142c547 ↗
- https://git.kernel.org/stable/c/b3fe4cbd583895987935a9bdad01c8f9d3a02310 ↗