Skip to content
7.5 High

CVE-2024-36929 In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO…

Description

In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skb_copy or skb_copy_expand, in order to prevent a crash on a potential later call to skb_gso_segment.

Affected products and versions

Product Affected versions Fixed in
Linux 6.9 earliest → < 6.9 6.9
Linux 6.8 earliest → < 6.8.10 6.8.10
Linux 6.6 earliest → < 6.6.31 6.6.31
Linux 6.1 earliest → < 6.1.91 6.1.91
Linux 5.15 earliest → < 5.15.159 5.15.159
Linux 5.10 earliest → < 5.10.217 5.10.217
Linux 5.6 No fix stated
RUGGEDCOM RST2428P 3.1 earliest → < 3.1 3.1
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family Versions not published
Show the 2 other branches
Product Affected versions Fixed in
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 earliest → < 3.1 3.1
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1.1 1.1.1

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE