PT-2024-5864 · Linux+5 · Linux Kernel+5
Published
2022-11-15
·
Updated
2024-11-08
·
CVE-2022-48936
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel's gso component, which fails to skip the outer IP header in certain cases, such as when using ipip and net failover. This can cause a TCP drop issue, leading to a denial of service. The problem occurs when a packet is transmitted with a specific combination of flags (SKB GSO TCPV4, SKB GSO DODGY, and SKB GSO IPXIP4) and the network header points to the inner IP header instead of the outer one. The root cause is a rare combination of SKB GSO DODGY and a tunnel device that adds an SKB GSO tunnel option.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux