CVE-2023-52906

A flaw was found in the Linux Kernel. The 'TCAMPLSLABEL' attribute is of the 'NLAU32' type, but has a validation type of 'NLAVALIDATEFUNCTION'. This is an invalid combination according to 'struct nlapolicy', which can trigger the nlagetrangeunsigned warning when validation of the attribute fails...

CVE-2023-52906

CVE-2023-52906 affects the Linux kernel’s net/sched code (act_mpls). The TCA_MPLS_LABEL attribute is NLA_U32 but uses NLA_POLICY_VALIDATE_FN, causing nla_get_range_unsigned() warnings due to negative min/max values. The fix changes the attribute type to NLA_BINARY and relocates length validation ...