net: preserve skb_end_offset() in skb_unclone_keeptruesize()
Summary
GSD-2022-1001746: net: preserve skb_end_offset() in skb_unclone_keeptruesize(). Affects Kernel versions >= fa5f8606353fd09af052d609e7988ee26fc1f2d5, < 23629b673b780d967b88a850b1518cf0f0ffc6aa. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications. It plays a crucial role in the overall functionality and security of the system. The specific vulnerability, identified as GSD-2022-1001746, relates to the preservation of skb_end_offset() in the skb_unclone_keeptruesize() function.
Vulnerability Detail
The vulnerability arises from a missing preservation of skb_end_offset() in the skb_unclone_keeptruesize() function within the Kernel. This omission can potentially lead to security vulnerabilities, although the actual impact and attack plausibility have not been proven yet. The vulnerability was introduced in version v5.15.5 of the Linux Kernel by commit fa5f8606353fd09af052d609e7988ee26fc1f2d5. However, it has been fixed in version v5.15.33 by commit 23629b673b780d967b88a850b1518cf0f0ffc6aa.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel package, specifically related to the preservation of skb_end_offset() in the skb_unclone_keeptruesize() function, has been identified and fixed in version v5.15.33 of the Linux Kernel. It is crucial to update the Kernel to this version or later to ensure the mitigation of any potential security risks. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications.
skb_end_offset() is a function within the Kernel that determines the end offset of a socket buffer (skb) structure.
skb_unclone_keeptruesize() is a function within the Kernel that unclones a socket buffer (skb) structure while preserving its true size.
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven. However, it is important to update the Kernel to the fixed version to mitigate any potential security risks.
To update the Linux Kernel package, you can follow the instructions provided by your Linux distribution or refer to the official documentation for the specific steps.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
