Vulnerability in Kernel: gso: do not skip outer ip header in case of ipip and net_failover
Summary
GSD-2022-1000810: gso: do not skip outer ip header in case of ipip and net_failover. Affects Kernel versions >= cb32f511a70be8967ac9025cf49c44324ced9a39, < 899e56a1ad435261812355550ae869d8be3df395. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. This vulnerability affects the Kernel's handling of outer IP headers in the presence of IP-in-IP (IPIP) and net_failover configurations.
Vulnerability Detail
The vulnerability arises from a flaw in the gso (Generic Segmentation Offload) implementation of the Kernel. In certain scenarios involving IPIP and net_failover, the outer IP header is erroneously skipped, leading to potential security issues. The impact and plausibility of attacks exploiting this vulnerability have not been proven yet. However, it is essential to address this issue to ensure the integrity and security of the affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, applying the recommended fix by updating the Kernel version will effectively address the issue.
Conclusion
This vulnerability in the Kernel's gso implementation can potentially lead to security issues when dealing with IPIP and net_failover configurations. It is crucial to update the Kernel to version v5.15.26 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software.
gso is a feature in the Kernel that offloads the segmentation of large network packets to hardware, improving network performance.
IPIP is a tunneling protocol that encapsulates IP packets within IP packets, allowing for the creation of virtual private networks (VPNs) and other network overlays.
net_failover is a network configuration that provides failover capabilities by automatically switching to a backup network interface in case of primary interface failure.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
