Описание
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
Отчет
Red Hat rates this flaw LOW impact. A use of an uninitialized variable was found in the Linux kernel's FOU/GUE (Foo over UDP) tunneling receive path in net/ipv4/fou_core.c. When the associated fou socket structure is NULL, the code jumps to the exit path and uses the uninitialized gro_cells pointer (grc), causing undefined behavior in the kernel packet receive/GRO path that can crash the kernel and cause a denial of service. Red Hat's assessment reflects a local attack vector requiring privileges with availability-only impact (CVSS 3.1: 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Within the current Red Hat product scope, only the Fedora kernel is affected, and the fix is pursued through the community kernel update process; Red Hat Enterprise Linux 6, 7, 8 and 9 kernel and kernel-rt, as well as the hosted OpenShift environments, are recorded as not affected, which is consistent with the upstream advisory showing that the regression was introduced only in specific upstream stable kernel point releases (5.10.226, 5.15.167, 6.1.110, 6.6.51, 6.10.10). The severity assigned by external parties differs from Red Hat's rating: NIST scores 7.1 and the CVE.org record scores 9.8 using a network attack vector, which does not match this flaw's local, privilege-gated receive-path code with availability-only impact.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. For the affected Fedora kernel, apply the latest available Fedora kernel package updates, which carry the upstream fix.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
In the Linux kernel, the following vulnerability has been resolved: f ...
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
Уязвимость функции gue_gro_receive() реализации протокола IPv4 ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации
EPSS
5.5 Medium
CVSS3