PT-2024-33821 · Linux+2 · Linux Kernel+2
Felix Fietkau
+1
·
Published
2024-09-26
·
Updated
2025-02-28
·
CVE-2024-49979
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue concerns the Linux kernel's handling of TCP fragmentation. Specifically, it involves the
net: gso: fix tcp fraglist segmentation after pull from frag list fix, which addresses a problem where optional datapath hooks like NAT and BPF can modify SKB GSO FRAGLIST skbs, breaking their invariants. This can lead to a NULL pointer dereference in tcpv4 gso segment list csum at tcp hdr(seg->next). The solution involves detecting invalid geometry due to pull by checking the head skb size and converting it to be able to pass to regular skb segment instead of skb segment list.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu