Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive.

Affected versions

Linux: ded37d03440d0ab346a8287cc2ba88b8dc90ceb0 through before ae8512e93f4ce47614ca89defaec1b93e00697b8 (git); 2323690eb05865a657709f4d28eb9538ea97bfc2 through before 1504108cb6020df7b1a31c9bb80fd587470aa448 (git); 5796015fa968a3349027a27dcd04c71d95c53ba5 through before e891b36de161fcd96f12ff83667473e5067b9037 (git); 5796015fa968a3349027a27dcd04c71d95c53ba5 through before 3574d28caf9a09756ae87ad1ea096c6f47b6101e (git); 5796015fa968a3349027a27dcd04c71d95c53ba5 through before 6ab6bf731354a6fdbaa617d1ec194960db61cf3b (git); 5796015fa968a3349027a27dcd04c71d95c53ba5 through before 56efc253196751ece1fc535a5b582be127b0578a (git); 5796015fa968a3349027a27dcd04c71d95c53ba5 through before da273b377ae0d9bd255281ed3c2adb228321687b (git); b34c668a867ffdcf8bd8db4a36512572e82b4a15 (git); 5.4.137 through before 5.4.289 (semver); 5.10.55 through before 5.10.233 (semver); 5.13.7 through before 5.14 (semver); 5.14 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.