CVE-2024-35973

The Linux kernel contains a vulnerability in the geneve tunnel helper where pskb_inet_may_pull() fails to perform proper header validation because it relies on skb->protocol instead of skb_protocol(skb, true). This allows an uninitialized value to be triggered in geneve_xmit() when a VLAN tag ...