seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
Summary
GSD-2022-1004391: seg6: bpf: fix skb checksum in bpf_push_seg6_encap(). Affects Kernel versions >= fe94cc290f535709d3c5ebd1e472dfd0aec7ee79, < 2d84fcb6e6f74c96eb03e6a1b9eed0a164e37b2c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware. The specific vulnerability, identified as GSD-2022-1004391, relates to the seg6 module in the Kernel. The seg6 module is responsible for implementing Segment Routing IPv6 (SRv6) functionality, which allows for efficient routing of IPv6 packets. The vulnerability in bpf_push_seg6_encap() function can lead to incorrect checksum calculation for packets, potentially resulting in network issues or security vulnerabilities.
Vulnerability Detail
The vulnerability in bpf_push_seg6_encap() function within the seg6 module of the Kernel can result in incorrect checksum calculation for packets. This can lead to network issues or potential security vulnerabilities. The issue was introduced in version v4.18 of the Linux Kernel by commit fe94cc290f535709d3c5ebd1e472dfd0aec7ee79 and has been fixed in version v5.15.56 by commit 2d84fcb6e6f74c96eb03e6a1b9eed0a164e37b2c. The impact and attack plausibility of the vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The seg6: bpf: fix skb checksum in bpf_push_seg6_encap() vulnerability in the Kernel package can result in incorrect checksum calculation for packets, potentially leading to network issues or security vulnerabilities. It is crucial to update the Linux Kernel to version v5.15.56 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in incorrect checksum calculation for packets, potentially leading to network issues or security vulnerabilities.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, a patch has been released in version v5.15.56 of the Linux Kernel. It is recommended to update to this version or later to fix the vulnerability.
The remote exploitability of this vulnerability has not been proven yet. However, it is important to apply the patch as soon as possible to mitigate any potential risks.
There are no known instances of this vulnerability being exploited at the moment. However, it is always recommended to stay updated with the latest security patches to minimize the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
