neighbour: allow NUD_NOARP entries to be forced GCed (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.69 % · centile 53 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUD_NOARP entries to be forced GCed IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that. This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD_FAILED, unless they are more than 5s old.
Faiblesses (CWE)
- CWE-190 — Débordement d'entier
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Linux |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-33757
- GCVE · GCVE-0-2021-47109
Avis du CERT-FR
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.0 < 5.4.125cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.43cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.12.10cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 58956317c8de52009d1a38a721474c24aef74fe7 < d99029e6aab62aef0a0251588b2867e77e83b137 ; affected 58956317c8de52009d1a38a721474c24aef74fe7 < d17d47da59f726dc4c87caebda3a50333d7e2fd3 ; affected 58956317c8de52009d1a38a721474c24aef74fe7 < ddf088d7aaaaacfc836104f2e632b29b1d383cfc ; affected 58956317c8de52009d1a38a721474c24aef74fe7 < 7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f |
| Linux · Linux | affected 5.0 ; unaffected 0 < 5.0 ; unaffected 5.4.125 ≤ 5.4.* ; unaffected 5.10.43 ≤ 5.10.* ; unaffected 5.12.10 ≤ 5.12.* ; unaffected 5.13 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |