Tom Parkin

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to the l2tp component of the Linux kernel, specifically with the `l2tp ip6 sendmsg()` function in `net/l2tp/l2tp ip6.c`. The problem arises from an incorrect calculation in the code, which results in corrupted packets on the wire due to C operator precedence. This incorrect calculation occurs when the code attempts to avoid accounting for the transport header twice when splicing more data into an already partially-occupied skbuff. The exploitation of this issue may allow an attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.