Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:30722
HistoryMay 10, 2014 - 12:00 a.m.

[oss-security] CVE request Linux kernel: filter: prevent nla extensions to peek beyond the end of the message

2014-05-1000:00:00
vulners.com
15

Hello,

Linux kenrel built with the BPF interpreter support in the networking core is vulnerable to an out of bounds buffer access flaw. It occurs when accessing a netlink attribute from the skb->data buffer.

An unprivileged user/program could use this flaw to crash the system kernel resulting in DoS.

Upstream fix:

-> https://git.kernel.org/linus/05ab8f2647e4221cbdb3856dd7d32bd5407316b3

Introduced by:

-> https://git.kernel.org/linus/4738c1db1593687713869fa69e733eebc7b0d6d8
-> https://git.kernel.org/linus/d214c7537bbf2f247991fb65b3420b0b3d712c67

Thank you.

Prasad J Pandit / Red Hat Security Response Team