CVE-2024-26921

CVE-2024-26921 affects the Linux kernel inet_defrag path. The issue arises when ip_local_out() and similar calls pass skb->sk as an argument and the skb is a fragment undergoing reassembly; if reassembly happens before the call returns, the socket (skb->sk) must not be released. This can oc...

PT-2021-8274 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc6+ Description: The vulnerability is related to a stack out-of-bounds read in the ip do fragment function when fragmenting IPv4 packets. This occurs when the ovs fragment function uses a temporary struc...