CVE-2023-2860

CVE-2023-2860 is an out-of-bounds read vulnerability in the Linux kernel’s SR-IPv6 implementation, specifically in the processing of seg6 attributes. It stems from improper validation of user-supplied data, allowing a privileged local user to read beyond the end of an allocated buffer and disclos...

CVE-2023-2860: Out-of-bounds Read

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This fla...

CVE-2023-2860

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This fla...

CVE-2023-2860

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This fla...

PT-2022-6725

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to an out-of-bounds read vulnerability in the SR-IPv6 implementation in the Linux kernel, specifically within the processing of seg6 attributes. This flaw results fr...

GSD-2022-1004863 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...

GSD-2022-1004795 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...

GSD-2022-1004792 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...

GSD-2022-1004566 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004170 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

PT-2022-32226

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v4.14.283. The actual impact and attack plausibility have not yet been...

PT-2022-31518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and is fixed in Linux Kernel version v5.15.47. The actual impact and attack plausibility have not yet been...

PT-2022-31776

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v5.10.122. The actual impact and attack plausibility have not yet been...

PT-2022-31966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v5.4.198. The actual impact and attack plausibility have not yet been...

PT-2022-32111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the seg6 hmac init function in the Linux Kernel's IPv6 implementation. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

GSD-2021-1002591 seg6: fix the iif in the IPv6 socket control block

seg6: fix the iif in the IPv6 socket control block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...