Description
In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovs_ct_get_conn_labels() adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may reallocate and free the extension block while another CPU accesses it. Only add the extension for unconfirmed conntracks. A confirmed conntrack without labels now fails the caller's label operation instead of reallocating its extension storage.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c2ac667358708d7cce64c78f58af6adf4c1e848b to < 4371d79ea74407fb992c985b1f94391e35bb8289affectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < 7ff688aceada1160331a789385ea146f62fbddf7affectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < 05eab8dced6bf4d3009a6eeee16ddac99047dc83affectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < 579d87ec1e1e85729a6cb2c25961e58beb78640caffectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < 2e6dd889c325abf23821e1459c3ffef59b7f0009affectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < d16f089bd700f45d720ce989d5495e1dc3be0cf8affectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < 8c9fcc6c33950d3db551af664d1fd3d998bfee56affectedc2ac667358708d7cce64c78f58af6adf4c1e848b to < 3f118c8217c109fd13ca61caa301d72c483897efaffected
Linux Linux
Default version status: affected
4.3affected0 to < 4.3unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4371d79ea74407fb992c985b1f94391e35bb8289 ↗
- https://git.kernel.org/stable/c/7ff688aceada1160331a789385ea146f62fbddf7 ↗
- https://git.kernel.org/stable/c/05eab8dced6bf4d3009a6eeee16ddac99047dc83 ↗
- https://git.kernel.org/stable/c/579d87ec1e1e85729a6cb2c25961e58beb78640c ↗
- https://git.kernel.org/stable/c/2e6dd889c325abf23821e1459c3ffef59b7f0009 ↗
- https://git.kernel.org/stable/c/d16f089bd700f45d720ce989d5495e1dc3be0cf8 ↗
- https://git.kernel.org/stable/c/8c9fcc6c33950d3db551af664d1fd3d998bfee56 ↗
- https://git.kernel.org/stable/c/3f118c8217c109fd13ca61caa301d72c483897ef ↗