Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG(). Also, add more checks for the length of the inner headers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < 19657b3a17b774ae4e2f2635b5ae8638c9344a40affectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < dac813101914c21219ac221a60a31a11bc90e7ecaffectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < dd22f74a09e25ca298ced0a3763ef353242cb78daffectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < 9bc9b95aee2b2e3f1301a16a67ee504960402875affectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < a735f9964a3d9ed97daf9b08507f8b5bcafe6326affectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < 8f48cfe657409fb5c7ba0521b14da6d47546d9cfaffectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < 92185d6f7819bc558939ae83de7b1abe90e3b5c2affectedf2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to < 3f7a535ff0fa627a0132803e4c2f903ceffcbc1caffected
Linux Linux
Default version status: affected
3.7affected0 to < 3.7unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/19657b3a17b774ae4e2f2635b5ae8638c9344a40 ↗
- https://git.kernel.org/stable/c/dac813101914c21219ac221a60a31a11bc90e7ec ↗
- https://git.kernel.org/stable/c/dd22f74a09e25ca298ced0a3763ef353242cb78d ↗
- https://git.kernel.org/stable/c/9bc9b95aee2b2e3f1301a16a67ee504960402875 ↗
- https://git.kernel.org/stable/c/a735f9964a3d9ed97daf9b08507f8b5bcafe6326 ↗
- https://git.kernel.org/stable/c/8f48cfe657409fb5c7ba0521b14da6d47546d9cf ↗
- https://git.kernel.org/stable/c/92185d6f7819bc558939ae83de7b1abe90e3b5c2 ↗
- https://git.kernel.org/stable/c/3f7a535ff0fa627a0132803e4c2f903ceffcbc1c ↗