ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Raw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will hit WARN_ON_ONCE() in sk_mc_loop() through sch_direct_xmit() path. WARNING: CPU: 2 PID: 0 at net/core/sock.c:775 sk_mc_loop+0x2d/0x70 Modules linked in: sch_netem ipvlan rfkill cirrus drm_shmem_helper sg drm_kms_helper CPU: 2 PID: 0 Comm: swapper/2 Kdump: loaded Not tainted 6.9.0+ #279 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:sk_mc_loop+0x2d/0x70 Code: fa 0f 1f 44 00 00 65 0f b7 15 f7 96 a3 4f 31 c0 66 85 d2 75 26 48 85 ff 74 1c RSP: 0018:ffffa9584015cd78 EFLAGS: 00010212 RAX: 0000000000000011 RBX: ffff91e585793e00 RCX: 0000000002c6a001 RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffff91e589c0f000 RBP: ffff91e5855bd100 R08: 0000000000000000 R09: 3d00545216f43d00 R10: ffff91e584fdcc50 R11: 00000060dd8616f4 R12: ffff91e58132d000 R13: ffff91e584fdcc68 R14: ffff91e5869ce800 R15: ffff91e589c0f000 FS: 0000000000000000(0000) GS:ffff91e898100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f788f7c44c0 CR3: 0000000008e1a000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn (kernel/panic.c:693) ? sk_mc_loop (net/core/sock.c:760) ? report_bug (lib/bug.c:201 lib/bug.c:219
CVE-2024-33621
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-33621
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "0049a623dfbbb49888de7f0c2f33a582b5ead989",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "54768bacfde60e8e4757968d79f8726711dd2cf5",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "1abbf079da59ef559d0ab4219d2a0302f7970761",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "183c4b416454b9983dc1b8aa0022b748911adc48",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "cb53706a3403ba67f4040b2a82d9cf79e11b1a48",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "54213c09801e0bd2549ac42961093be36f65a7d0",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "13c4543db34e0da5a7d2f550b6262d860f248381",
"versionType": "git"
},
{
"status": "affected",
"version": "2ad7bf3638411cb547f2823df08166c13ab04269",
"lessThan": "b3dc6e8003b500861fa307e9a3400c52e78e4d3a",
"versionType": "git"
}
],
"programFiles": [
"drivers/net/ipvlan/ipvlan_core.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "3.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "3.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.19.316",
"versionType": "semver",
"lessThanOrEqual": "4.19.*"
},
{
"status": "unaffected",
"version": "5.4.278",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.219",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.161",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.93",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.33",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.9.4",
"versionType": "semver",
"lessThanOrEqual": "6.9.*"
},
{
"status": "unaffected",
"version": "6.10",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/ipvlan/ipvlan_core.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-33621
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26510 · Revision 1
- Added to Heist Feed
- Publisher date