MTU Regression in xfrm
Summary
GSD-2022-1000901: xfrm: fix MTU regression. Affects Kernel versions >= 749439bfac6e1a2932c582e2699f91d329658196, < 20fe64c54412ca42efb9ba07f856ed8cac6e007e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The xfrm package is a component of the Linux Kernel that provides IPsec protocol support for network communication. It is responsible for securing network traffic by encrypting and authenticating IP packets. The package implements the IPsec framework, which allows for the creation of security associations (SA) and policies to protect network traffic. The xfrm package is a critical component for establishing secure communication channels in Linux-based systems.
Vulnerability Detail
The MTU regression vulnerability in xfrm affects versions 4.15 to 4.19 of the Linux Kernel. It was introduced in commit 749439bfac6e1a2932c582e2699f91d329658196 and fixed in commit 20fe64c54412ca42efb9ba07f856ed8cac6e007e. This vulnerability impacts the Maximum Transmission Unit (MTU) handling in the xfrm package, leading to potential network connectivity issues. Attackers could exploit this vulnerability to cause denial-of-service (DoS) conditions or disrupt network communication. The vulnerability has been addressed in Linux Kernel version 4.19.233.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The MTU regression vulnerability in xfrm can have significant implications for network connectivity and security. It is crucial to update the Linux Kernel to version 4.19.233 or later to mitigate this vulnerability. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The xfrm package is a component of the Linux Kernel that provides IPsec protocol support for network communication. It enables the creation of secure communication channels by implementing the IPsec framework.
The MTU regression vulnerability in xfrm can lead to network connectivity issues, potentially causing denial-of-service (DoS) conditions or disrupting network communication.
Versions 4.15 to 4.19 of the Linux Kernel are affected by the MTU regression vulnerability in xfrm.
To fix the MTU regression vulnerability, it is recommended to update the Linux Kernel to version 4.19.233 or later.
No specific workaround has been provided for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
