Lucene search

K
cve416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2024-35889
HistoryMay 19, 2024 - 9:15 a.m.

CVE-2024-35889

2024-05-1909:15:09
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
26
cve-2024-35889
linux kernel
vulnerability
idpf
packet types
kernel panic
eth_type_trans
network layer

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix kernel panic on unknown packet types

In the very rare case where a packet type is unknown to the driver,
idpf_rx_process_skb_fields would return early without calling
eth_type_trans to set the skb protocol / the network layer handler.
This is especially problematic if tcpdump is running when such a
packet is received, i.e. it would cause a kernel panic.

Instead, call eth_type_trans for every single packet, even when
the packet type is unknown.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for CVE-2024-35889