MTU Regression in xfrm
Summary
GSD-2022-1000774: xfrm: fix MTU regression. Affects Kernel versions >= 749439bfac6e1a2932c582e2699f91d329658196, < 75cbedd333431381ef309c5b0968582c7ba4c8ee. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The xfrm package is a component of the Linux Kernel that provides IPsec (Internet Protocol Security) functionality. It is responsible for managing the transformation of packets between IPsec tunnels and the underlying network stack. The package is crucial for secure communication over IP networks and is widely used in various Linux distributions. However, a vulnerability has been discovered in the xfrm package that affects the Maximum Transmission Unit (MTU) handling.
Vulnerability Detail
The vulnerability in the xfrm package leads to a regression in MTU handling. It was introduced in version v4.15 of the Linux Kernel and has been present until version v5.15.27. The exact impact and attack plausibility of this vulnerability have not yet been proven. However, it is important to address this issue to prevent potential security risks. The vulnerability has been fixed in Linux Kernel version v5.15.27 by commit 75cbedd333431381ef309c5b0968582c7ba4c8ee.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The MTU regression vulnerability in the xfrm package can be addressed by updating the Linux Kernel to version v5.15.27 or later. It is crucial to ensure that the updated Kernel version is properly installed and configured. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The xfrm package is a component of the Linux Kernel that provides IPsec functionality for secure communication over IP networks.
The exact impact and attack plausibility of this vulnerability have not yet been proven. However, it is important to address this issue to prevent potential security risks.
To fix the vulnerability, update the Linux Kernel to version v5.15.27 or later.
No specific workaround has been mentioned for this vulnerability.
For more details about this vulnerability, refer to the provided references link.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
