Description
In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address. Use neigh_ha_snapshot() in route_shortcircuit() to safely copy n->ha under read_seqbegin()/read_seqretry() lock protection before using it. Note that arp_reduce() and neigh_reduce() seem to have the same issue left for future patches.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e4f67addf158f98f8197e08974966b18480dc751 to < 32a9590a8d30426e3db63e6b20893e47e02576c0affectede4f67addf158f98f8197e08974966b18480dc751 to < d0993fc053f29e15cc7c9fe2029df3882a2ab5abaffectede4f67addf158f98f8197e08974966b18480dc751 to < 87210054bad82bbae6f483a742dc45722fb47a6baffectede4f67addf158f98f8197e08974966b18480dc751 to < d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0affectede4f67addf158f98f8197e08974966b18480dc751 to < ec341bb76d77b4c2948764375ee6bfeef4bb41c3affectede4f67addf158f98f8197e08974966b18480dc751 to < ff89415d34c3ab9f5312316423122e664ed3524faffectede4f67addf158f98f8197e08974966b18480dc751 to < 05f2987f73daa05333fd713d05546142f9f7c5f0affectede4f67addf158f98f8197e08974966b18480dc751 to < 8eca411347e1d38964f9ed2c8d3b6ab0e7e4473daffected
Linux Linux
Default version status: affected
3.8affected0 to < 3.8unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.151 to ≤ 6.6.*unaffected6.12.103 to ≤ 6.12.*unaffected6.18.44 to ≤ 6.18.*unaffected7.1.8 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/32a9590a8d30426e3db63e6b20893e47e02576c0 ↗
- https://git.kernel.org/stable/c/d0993fc053f29e15cc7c9fe2029df3882a2ab5ab ↗
- https://git.kernel.org/stable/c/87210054bad82bbae6f483a742dc45722fb47a6b ↗
- https://git.kernel.org/stable/c/d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0 ↗
- https://git.kernel.org/stable/c/ec341bb76d77b4c2948764375ee6bfeef4bb41c3 ↗
- https://git.kernel.org/stable/c/ff89415d34c3ab9f5312316423122e664ed3524f ↗
- https://git.kernel.org/stable/c/05f2987f73daa05333fd713d05546142f9f7c5f0 ↗
- https://git.kernel.org/stable/c/8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d ↗