CVE-2022-49142 net: preserve skb_end_offset() in skb_unclone_keeptruesize()

In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unreserved skbendoffset in skbunclonekeeptruesize...

kernel: net: preserve skb_end_offset() in skb_unclone_keeptruesize()

In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...

PT-2022-30019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.5 through v5.15.32 Description The issue is related to the preservation of skb end offset in skb unclone keeptruesize. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29365

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the preservation of skb end offset in skb unclone keeptruesize. It was introduced in version v5.16 and fixed in version v5.17.2. The actual impact and attack plausibility ha...

PT-2022-29695

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns the preservation of skb end offset in skb unclone keeptruesize. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-38023

Уязвимость функции skb unclone keeptruesize модуля net/core/skbuff.h поддержки сетевых функций ядра операционной системы Linux связана с несанкционированным вызовом утверждения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-8070

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc4-syzkaller-00229-g4f12b742eb2b Description A vulnerability has been identified in the Linux kernel, specifically in the skb unclone keeptruesize function. The issue arises when the kernel fails to...