Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() The timestamp-only fast path dereferences the option stream as *(__be32 *)ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use get_unaligned_be32() instead, which reads the value safely and already returns host byte order, so the htonl() on the comparison constant can be dropped. This matches the existing get_unaligned_be32() use later in the same function.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < 740ad3d17a281f7764dda4dbeb37cea52e2e31aeaffectedbb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < a0523267de2523522b0f70972dd1ffa22ec6176caffectedbb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < 55bcc3376cd7b18954cc9814da697504fdaf12bfaffectedbb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < 0d5ad732e4fdc569eb85861115e8f7b4c2c67852affectedbb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < 7ecfa46a536578a7ed335ddf31a854127268c27caffectedbb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < 4abc1af7ac209c066f4e5dd75cdd56876e5829a9affectedbb9fc37358ffa9de1cc2b2b6f1a559b926ef50d9 to < d3bf9eae486490832bd08fd62ab0ac601f346bd4affected
Linux Linux
Default version status: affected
3.1affected0 to < 3.1unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/740ad3d17a281f7764dda4dbeb37cea52e2e31ae ↗
- https://git.kernel.org/stable/c/a0523267de2523522b0f70972dd1ffa22ec6176c ↗
- https://git.kernel.org/stable/c/55bcc3376cd7b18954cc9814da697504fdaf12bf ↗
- https://git.kernel.org/stable/c/0d5ad732e4fdc569eb85861115e8f7b4c2c67852 ↗
- https://git.kernel.org/stable/c/7ecfa46a536578a7ed335ddf31a854127268c27c ↗
- https://git.kernel.org/stable/c/4abc1af7ac209c066f4e5dd75cdd56876e5829a9 ↗
- https://git.kernel.org/stable/c/d3bf9eae486490832bd08fd62ab0ac601f346bd4 ↗