kernel: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

Linux Distros Unpatched Vulnerability : CVE-2024-42321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: Use DEBUGNETWARNONONCE. The following issue is easy to reproduce both upstream and in the -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 “net: add and use skbgethashsymmetricnet"...

ntopng 安全漏洞

ntopng is a web-based network traffic monitoring application from ntop open source. A security vulnerability exists in ntopng version 6.2, which stems from a heap buffer overflow vulnerability in the Flow::dissectMDNS function...

CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

SUSE CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

DEBIAN-CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

AZL-68357 CVE-2024-42321 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

UBUNTU-CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

PT-2024-29870

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A vulnerability has been resolved in the Linux kernel, specifically in the net: flow dissector component. The issue is related to the use of DEBUG NET WARN ON ONCE to silence a splat given skb...

CVE-2021-47592

CVE-2021-47592 affects the Linux kernel stmmac driver and its VLAN priority RX steering path. The issue manifested as a NULL pointer dereference when deleting a tc flower filter for VLAN priority after a previous mis-implemented tc_del_vlan_flow() used flow_cls_offload_flow_rule() (invalid for tc...

CVE-2021-47592 net: stmmac: fix tc flower deletion for VLAN priority Rx steering

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix tc flower deletion for VLAN priority Rx steering To replicate the issue:- 1 Add 1 flower filter for VLAN Priority based frame steering:- $ IFDEVNAME=eth0 $ tc qdisc add dev $IFDEVNAME ingress $ tc qdisc add dev...

kernel: net/core: kernel crash in ETH_P_1588 flow dissector

A flaw was found in the ETHP1588 flow dissector in the Linux Kernel, which can lead to a kernel crash...

kernel: net/core: kernel crash in ETH_P_1588 flow dissector

A flaw was found in the ETHP1588 flow dissector in the Linux Kernel, which can lead to a kernel crash...

CVE-2024-35941

REJECTED CVE A use-after-free vulnerability was identified in the Linux kernel's net subsystem, specifically in skbuff handling. The issue arises from an overflow of the skb-networkheader a u16 value, causing skbnetworkoffsetskb to return a negative value. This results in the skbpull function...

CVE-2024-35941

This CVE (CVE-2024-35941) has concrete details in connected sources: a use-after-free in the Linux kernel net subsystem, due to skb->network_header overflow (u16) that makes skb_network_offset(skb) return a negative value. Consequently, __skb_pull() can move skb->data to memory outside skb-...

kernel: net/core: kernel crash in ETH_P_1588 flow dissector

A flaw was found in the ETHP1588 flow dissector in the Linux Kernel, which can lead to a kernel crash...

SUSE CVE-2024-26804

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in skbflowdissect+0x19d1/0x7a50 net/core/flowdissector.c:1170 Read of size 1 at addr ffff88812fb4000e by task...

UBUNTU-CVE-2024-26804

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in skbflowdissect+0x19d1/0x7a50 net/core/flowdissector.c:1170 Read of size 1 at addr ffff88812fb4000e by task...

The vulnerability of the __skb_flow_dissect() function in the networking component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the skbflowdissect function in the net/core/flowdissector.c file of the Linux kernel’s network component is related to incorrect calculation of the network header offset. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and...