Critical TCP Fraglist Segmentation Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-49979: In the Linux kernel, the following vulnerability has been resolved: net: gso: fix tcp fraglist segmentation after pull from frag_list Detect tcp gso fraglist skbs with corrupted geometry (see below) and pass these to skb... Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential services such as process management, memory management, and device control. The kernel is highly modular and supports a wide range of hardware architectures. However, it is susceptible to vulnerabilities that can compromise system stability and security, such as the one identified in this report.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to TCP GSO (Generic Segmentation Offload) fraglist segmentation. This issue arises when the kernel detects TCP GSO fraglist skbs (socket buffers) with corrupted geometry, which can lead to a NULL pointer dereference in the function __tcpv4_gso_segment_list_csum. This vulnerability can be exploited by optional datapath hooks like NAT and BPF, which may inadvertently modify the skbs, resulting in severe network issues, including potential blackholing of destinations.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is strongly recommended to apply the patch as soon as it is available to mitigate any risks associated with this issue.
Conclusion
In summary, the identified vulnerability in the Linux kernel related to TCP GSO fraglist segmentation poses significant risks to network stability and security. Users are strongly encouraged to update to the patched version 6.11.4-1 to mitigate these risks and ensure the integrity of their systems.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a flaw in the TCP GSO fraglist segmentation process, which can lead to a NULL pointer dereference and potential network disruptions.
You can use Vulert, which monitors open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
Exploitation of this vulnerability can lead to severe network issues, including system crashes and blackholing of network destinations.
Yes, a patch has been released in version 6.11.4-1 of the Linux package. Users are advised to update to this version.
While there are no specific workarounds, it is crucial to monitor your system for unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
