CVE-2024-27414

CVE-2024-27414: In the Linux kernel, the IFLA_BRIDGE_FLAGS writing-back error logic was fixed. The root cause was an adjusted loop in rtnl_bridge_setlink that checked IFLA_BRIDGE_MODE length but removed a break, causing the flags write path to use a possibly invalid NLA at the end of processing. ...

CVE-2024-27414

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: fix error logic of IFLABRIDGEFLAGS writing back In the commit d73ef2d69c0d "rtnetlink: let rtnlbridgesetlink checks IFLABRIDGEMODE length", an adjustment was made to the old loop logic in the function rtnlbridgesetlink...