kernel: tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()

In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume mac header is set in skbtunnelcheckpmtu Recently added debug in commit f9aefd6b2aa3 "net: warn if mac header was not set" caught a bug in skbtunnelcheckpmtu, as shown in this syzbot report 1. In ndostartxmi...

PT-2025-18817 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the use of skb mac header in ndo start xmit. Drivers should not assume skb mac headerskb == skb-data ...

PT-2022-34783 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue is related to out-of-bound bugs caused by an unset skb-mac header in the ipvlan module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34821 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue is related to out-of-bound bugs caused by an unset skb-mac header in the ipvlan module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

GSD-2022-1004602 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()

tunnels: do not assume mac header is set in skbtunnelcheckpmtu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...

GSD-2022-1004437 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()

tunnels: do not assume mac header is set in skbtunnelcheckpmtu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...

GSD-2022-1004263 netfilter: nf_dup_netdev: do not push mac header a second time

netfilter: nfdupnetdev: do not push mac header a second time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...