Description
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovs_ct_execute() always steals or frees the skb on failure while ovs_flow_key_update() does not. So, if it fails and we return right away, the skb ends up leaked. Fix that by breaking instead and letting the common error handling code at the bottom of the loop to free the skb properly. This is a very unlikely scenario as it requires the packet to become unparseable by applying a set of actions on a previously parseable skb, but should be fixed nevertheless. Reported by Sashiko.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ec0d043d05e6e3c0c2fac5de922c800c027c6386 to < b77126b2915900f69f9fcf5d624a77c8e6d50c31affectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < 6cc523eaee72c4e91894136cff64946ae9de2cdaaffectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < 22e0ca88090d89c128078062186b03bb5fdc4f98affectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < 736e972f3f8a304158345223ac6e816166a467ceaffectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < e84dfaac50aab45ad8c670da43e3aa1f97bd2a41affectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < e0ba8eaef2a0d02a7a485e6a7157e47272b65ceaaffectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < 393f3c72600ab6721d732a0ab245bc896c5b28fcaffectedec0d043d05e6e3c0c2fac5de922c800c027c6386 to < bc62e843bc48f933da765ce47079fd992e535794affected
Linux Linux
Default version status: affected
4.3affected0 to < 4.3unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.151 to ≤ 6.6.*unaffected6.12.103 to ≤ 6.12.*unaffected6.18.44 to ≤ 6.18.*unaffected7.1.8 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b77126b2915900f69f9fcf5d624a77c8e6d50c31 ↗
- https://git.kernel.org/stable/c/6cc523eaee72c4e91894136cff64946ae9de2cda ↗
- https://git.kernel.org/stable/c/22e0ca88090d89c128078062186b03bb5fdc4f98 ↗
- https://git.kernel.org/stable/c/736e972f3f8a304158345223ac6e816166a467ce ↗
- https://git.kernel.org/stable/c/e84dfaac50aab45ad8c670da43e3aa1f97bd2a41 ↗
- https://git.kernel.org/stable/c/e0ba8eaef2a0d02a7a485e6a7157e47272b65cea ↗
- https://git.kernel.org/stable/c/393f3c72600ab6721d732a0ab245bc896c5b28fc ↗
- https://git.kernel.org/stable/c/bc62e843bc48f933da765ce47079fd992e535794 ↗