PT-2026-106607

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A routing loop can be configured by a user with CAP NET ADMIN privileges. When ipip fill forward path or ip6 tnl fill forward path look up the route to a tunnel's remote endpoint and the...

PT-2026-96395

In the Linux kernel, the following vulnerability has been resolved: ip6 tunnel: use skb cow head in ip6 tnl xmit ip6 tnl xmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does that with skb realloc headroom, copies skb-sk ownership, consum...

DEBIAN-CVE-2024-26633

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: fix NEXTHDRFRAGMENT handling in ip6tnlparsetlvenclim syzbot pointed out 1 that NEXTHDRFRAGMENT handling is broken. Reading fragoff can only be done if we pulled enough bytes to skb-head. Currently we might access...

PT-2024-3379

Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.7.0-syzkaller-00562-g9f8413c4a66f Description: The vulnerability is related to the ip6 tnl rcv function in the Linux kernel's IPv6 implementation. The function could access uninitialized data, which may allow a remote...

PT-2024-3380

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the ip6 tnl parse tlv enc lim function in the Linux kernel's IPv6 implementation. The issue arises from broken NEXTHDR FRAGMENT handling, which can lead...