ip_gre: test csum_start instead of transport header
Summary
GSD-2022-1002939: ip_gre: test csum_start instead of transport header. Affects Kernel versions >= 8a0ed250f911da31a2aef52101bc707846a800ff, < 0c92d813c7c9ca2212ecd879232e7d87362fce98. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The ip_gre module is responsible for handling IP-over-GRE (Generic Routing Encapsulation) tunneling, which allows the encapsulation of IP packets within GRE packets for transmission over an IP network. This vulnerability in the ip_gre module could potentially lead to security issues.
Vulnerability Detail
The vulnerability in the ip_gre module arises from a flaw in the verification of the csum_start field instead of the transport header. This flaw could be exploited by an attacker to manipulate or bypass certain security mechanisms, potentially leading to unauthorized access, data tampering, or denial of service. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The ip_gre module in the Kernel package has a vulnerability that could potentially lead to security issues. It is recommended to update the Kernel package to version v5.17.15 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially include unauthorized access, data tampering, or denial of service.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you in real-time if any open-source vulnerabilities, including this one, are detected.
Yes, a patch is available in the Linux Kernel version v5.17.15. It is recommended to update your Kernel package to this version or later to fix the vulnerability.
The remote exploitability of this vulnerability has not been determined yet. However, it is important to apply the patch as soon as possible to mitigate any potential risks.
There are no known instances of this vulnerability being exploited at the moment. However, it is always advisable to stay updated with the latest security patches to minimize the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
