CVE-2024-26882

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() Apply the same fix than ones found in : 8d975c15c0cd ("ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()") 1ca1ba465e55 ("geneve: make sure to pull inner header in geneve_rx()") We have to save skb->network_header in a temporary variable in order to be able to recompute the network_header pointer after a pskb_inet_may_pull() call. pskb_inet_may_pull() makes sure the needed headers are in skb->head. syzbot reported: BUG: KMSAN: uninit-value in __IN...

Affected product and versions

Product

Linux Linux, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, linux kernel

Affected versions

>= c54419321455631079c7d6e60bc732dd0c5914c5 < ec6bb01e02cbd47781dd90775b631a1dc4bd9d2b, >= c54419321455631079c7d6e60bc732dd0c5914c5 < 77fd5294ea09b21f6772ac954a121b87323cec80, >= c54419321455631079c7d6e60bc732dd0c5914c5 < 5c03387021cfa3336b97e0dcba38029917a8af2a, >= c54419321455631079c7d6e60bc732dd0c5914c5 < 60044ab84836359534bd7153b92e9c1584140e4a, >= c54419321455631079c7d6e60bc732dd0c5914c5 < c4c857723b37c20651300b3de4ff25059848b4b0, >= c54419321455631079c7d6e60bc732dd0c5914c5 < f6723d8dbfdc10c784a56748f86a9a3cd410dbd5, >= c54419321455631079c7d6e60bc732dd0c5914c5 < ca914f1cdee8a85799942c9b0ce5015bbd6844e1, >= c54419321455631079c7d6e60bc732dd0c5914c5 < b0ec2abf98267f14d032102551581c833b0659d3, >= 3.10, >= 3.10 < 5.4.273, >= 5.5 < 5.10.214, >= 5.11 < 5.15.153, >= 5.16 < 6.1.83, >= 6.2 < 6.6.23, >= 6.7 < 6.7.11, >= 6.8 < 6.8.2

Fixed versions

5.4.273, 5.10.214, 5.15.153, 6.1.83, 6.6.23, 6.7.11, 6.8.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Not available