Описание
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI callback. If there is no XDP program attached, the veth code does not perform any share check, and shared/cloned skbs could enter the GRO engine. Ignat reported a BUG triggered later-on due to the above condition: [ 53.970529][ C1] kernel BUG at net/core/skbuff.c:3574! [ 53.981755][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 53.982634][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc5+ #25 [ 53.982634][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 [ 53.982634][ C1] RIP: 0010:skb_shift+0x13ef/0x23b0 [ 53.982634][ C1] Code: ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 41 0c 00 00 41 80 7f 02 00 4d 8d b5 d0 00 00 00 0f 85 74 ...
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-31.31 |
| esm-infra-legacy/trusty | not-affected | 3.11.0-12.19 |
| esm-infra/bionic | not-affected | 4.13.0-16.19 |
| esm-infra/focal | not-affected | 5.4.0-9.12 |
| esm-infra/xenial | not-affected | 4.4.0-2.16 |
| focal | not-affected | 5.4.0-9.12 |
| jammy | not-affected | 5.15.0-17.17 |
| mantic | not-affected | 6.2.0-20.20 |
| noble | not-affected | 6.5.0-9.9 |
| trusty/esm | not-affected | 3.11.0-12.19 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | end of kernel support |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1008.8 |
| esm-infra-legacy/trusty | not-affected | 4.4.0-1002.2 |
| esm-infra/bionic | not-affected | 4.15.0-1001.1 |
| esm-infra/focal | not-affected | 5.4.0-1005.5 |
| esm-infra/xenial | not-affected | 4.4.0-1001.10 |
| focal | not-affected | 5.4.0-1005.5 |
| jammy | not-affected | 5.15.0-1002.4 |
| mantic | not-affected | 6.2.0-1003.3 |
| noble | not-affected | 6.5.0-1008.8 |
| trusty/esm | not-affected | 4.4.0-1002.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-aws-5.3 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-5.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-aws-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-aws-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-aws-5.15 |
| focal | ignored | end of standard support, was ignored [superseded by linux-aws-5.15] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-5.15 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1014.18~20.04.1 |
| focal | not-affected | 5.15.0-1014.18~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-aws-6.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-6.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-aws-5.4 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-5.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1018.18~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-aws-5.11 |
| focal | ignored | end of standard support, was ignored [superseded by linux-aws-5.11] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-5.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-aws-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-aws-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1008.8~22.04.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| fips-updates/bionic | not-affected | 4.15.0-2000.4 |
| fips-updates/focal | not-affected | 5.4.0-1021.21+fips2 |
| fips/bionic | not-affected | 4.15.0-2000.4 |
| fips/focal | not-affected | 5.4.0-1021.21+fips2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 4.15.0-1030.31~16.04.1 |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1007.7 |
| esm-infra-legacy/trusty | not-affected | 4.15.0-1023.24~14.04.1 |
| esm-infra/bionic | ignored | superseded by linux-azure-5.3 |
| esm-infra/focal | not-affected | 5.4.0-1006.6 |
| esm-infra/xenial | not-affected | 4.11.0-1009.9 |
| focal | not-affected | 5.4.0-1006.6 |
| jammy | not-affected | 5.15.0-1001.2 |
| mantic | not-affected | 6.2.0-1003.3 |
| noble | not-affected | 6.5.0-1007.7 |
| trusty/esm | not-affected | 4.15.0-1023.24~14.04.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1082.92 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-azure-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-azure-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-azure-5.15 |
| focal | ignored | end of standard support, was ignored [superseded by linux-azure-5.15] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-5.15 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1007.8~20.04.1 |
| focal | not-affected | 5.15.0-1007.8~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-azure-6.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-6.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-azure-5.4 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-5.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1020.20~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-azure-5.11 |
| focal | ignored | end of standard support, was ignored [superseded by linux-azure-5.11] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-5.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-azure-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1007.7~22.04.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-azure-5.3 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-5.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-azure-fde-5.15 |
| focal | ignored | end of standard support, was ignored [superseded by linux-azure-fde-5.15] |
| jammy | not-affected | 5.15.0-1019.24.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1019.24~20.04.1.1 |
| focal | not-affected | 5.15.0-1019.24~20.04.1.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-azure-fde-6.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-azure-fde-6.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | replaced by linux-azure-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | replaced by linux-azure-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| fips-updates/bionic | not-affected | 4.15.0-1002.2 |
| fips-updates/focal | not-affected | 5.4.0-1022.22+fips1 |
| fips/bionic | not-affected | 4.15.0-1002.2 |
| fips/focal | not-affected | 5.4.0-1022.22+fips1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1007.10 |
| focal | not-affected | 5.4.0-1007.10 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| fips-updates/bionic | not-affected | 4.15.0-1027.32 |
| fips-updates/focal | not-affected | 5.4.0-1026.30 |
| fips-updates/xenial | not-affected | 4.4.0-1003.3 |
| fips/bionic | not-affected | 4.15.0-1011.12 |
| fips/focal | not-affected | 5.4.0-1007.8 |
| fips/xenial | not-affected | 4.4.0-1001.1 |
| focal | DNE | |
| jammy | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1007.7 |
| esm-infra/bionic | ignored | superseded by linux-gcp-5.3 |
| esm-infra/focal | not-affected | 5.4.0-1005.5 |
| esm-infra/xenial | not-affected | 4.10.0-1004.4 |
| focal | not-affected | 5.4.0-1005.5 |
| jammy | not-affected | 5.15.0-1001.3 |
| mantic | not-affected | 6.2.0-1005.5 |
| noble | not-affected | 6.5.0-1007.7 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1071.81 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-gcp-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-gcp-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gcp-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-gcp-5.15 |
| focal | ignored | end of standard support, was ignored [superseded by linux-gcp-5.15] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gcp-5.15 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1006.9~20.04.1 |
| focal | not-affected | 5.15.0-1006.9~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-gcp-6.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gcp-6.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-gcp-5.4 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gcp-5.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1019.19~18.04.2 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-gcp-5.11 |
| focal | ignored | end of standard support, was ignored [superseded by linux-gcp-5.11] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gcp-5.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-gcp-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gcp-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1010.10~22.04.3 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| fips-updates/bionic | not-affected | 4.15.0-2013.14 |
| fips-updates/focal | not-affected | 5.4.0-1021.21+fips1 |
| fips/bionic | not-affected | 4.15.0-1001.1 |
| fips/focal | not-affected | 5.4.0-1021.21+fips1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1003.5 |
| esm-infra/focal | ignored | end of kernel support |
| focal | ignored | end of kernel support |
| jammy | not-affected | 5.15.0-1002.2 |
| mantic | DNE | |
| noble | not-affected | 6.8.0-1003.5 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-gke-5.0 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-gke-5.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | end of kernel support |
| focal | ignored | end of kernel support |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | end of kernel support |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1008.9 |
| focal | not-affected | 5.4.0-1008.9 |
| jammy | not-affected | 5.15.0-1001.2 |
| mantic | DNE | |
| noble | not-affected | 6.8.0-1001.3 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1003.5~20.04.2 |
| focal | not-affected | 5.15.0-1003.5~20.04.2 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | end of kernel support |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | replaced by linux-hwe-5.4 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 4.8.0-39.42~16.04.1 |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-hwe-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-hwe-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-hwe-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-hwe-5.15 |
| focal | ignored | end of standard support, was ignored [superseded by linux-hwe-5.15] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-hwe-5.15 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-33.34~20.04.1 |
| focal | not-affected | 5.15.0-33.34~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-hwe-6.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-hwe-6.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-37.41~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-hwe-5.11 |
| focal | ignored | end of standard support, was ignored [superseded by linux-hwe-5.11] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-hwe-5.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-hwe-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-hwe-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-14.14~22.04.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-hwe-5.4 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | ignored | superseded by linux-hwe |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1005.5 |
| esm-infra/focal | not-affected | 5.4.0-1003.4 |
| focal | not-affected | 5.4.0-1003.4 |
| jammy | not-affected | 5.15.0-1002.2 |
| mantic | ignored | end of kernel support |
| noble | not-affected | 6.5.0-1009.9 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1033.36~20.04.1 |
| focal | not-affected | 5.15.0-1033.36~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1010.11~18.04.2 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | not-affected | 6.8.0-1001.6 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | end of kernel support |
| focal | ignored | end of kernel support |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-1004.6 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1003.5~20.04.1 |
| focal | not-affected | 5.15.0-1003.5~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1001.3 |
| focal | not-affected | 5.4.0-1001.3 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1002.2 |
| esm-infra/focal | not-affected | 5.4.0-1004.4 |
| esm-infra/xenial | not-affected | 4.4.0-1004.9 |
| focal | not-affected | 5.4.0-1004.4 |
| jammy | not-affected | 5.15.0-1002.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | not-affected | 6.5.0-1003.6 |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-31.31.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-22.22 |
| mantic | not-affected | 6.2.0-1003.3 |
| noble | not-affected | 6.5.0-9.9.1 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-33.34~20.04.1 |
| focal | not-affected | 5.15.0-33.34~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-lowlatency-hwe-6.2 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-lowlatency-hwe-6.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-lowlatency-hwe-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-lowlatency-hwe-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-14.14.1~22.04.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | not-affected | 4.4.0-13.29~14.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| trusty/esm | not-affected | 4.4.0-13.29~14.04.1 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-1005.5 |
| mantic | DNE | |
| noble | not-affected | 6.8.0-1007.7 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-nvidia-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-nvidia-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1004.4 |
| mantic | DNE | |
| noble | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1008.8~22.04.1 |
| noble | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.8.0-1009.9.1 |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | replaced by linux-hwe-5.4 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-oem-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-oem-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oem-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-oem-5.14 |
| focal | ignored | end of standard support, was ignored [superseded by linux-oem-5.14] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oem-5.14 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | replaced by linux-hwe-5.15 |
| focal | ignored | end of standard support, was ignored [replaced by linux-hwe-5.15] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | replaced by linux-hwe-5.15 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-oem-6.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oem-6.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-oem-5.10 |
| focal | ignored | end of standard support, was ignored [superseded by linux-oem-5.10] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oem-5.10 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-oem-6.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oem-6.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-oem-6.5, was needs-triage |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oem-6.5, was needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1003.3 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | not-affected | 6.8.0-1003.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1005.5 |
| esm-infra/bionic | not-affected | 4.15.0-1007.9 |
| esm-infra/focal | not-affected | 5.4.0-1005.5 |
| esm-infra/xenial | not-affected | 4.15.0-1007.9~16.04.1 |
| focal | not-affected | 5.4.0-1005.5 |
| jammy | not-affected | 5.15.0-1001.3 |
| mantic | not-affected | 6.2.0-1003.3 |
| noble | not-affected | 6.5.0-1010.10 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-oracle-5.3 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oracle-5.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-oracle-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-oracle-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oracle-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-oracle-5.15 |
| focal | ignored | end of standard support, was ignored [superseded by linux-oracle-5.15] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oracle-5.15 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1007.9~20.04.1 |
| focal | not-affected | 5.15.0-1007.9~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | ignored | superseded by linux-oracle-5.4 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oracle-5.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1019.19~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-oracle-5.11 |
| focal | ignored | end of standard support, was ignored [superseded by linux-oracle-5.11] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-oracle-5.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1013.13~22.04.4 |
| mantic | DNE | |
| noble | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-1004.4 |
| esm-infra/focal | not-affected | 5.4.0-1007.7 |
| focal | not-affected | 5.4.0-1007.7 |
| jammy | not-affected | 5.15.0-1002.2 |
| mantic | not-affected | 6.2.0-1004.5 |
| noble | not-affected | 6.5.0-1005.7 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1013.13~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | replaced by linux-raspi |
| focal | ignored | end of standard support, was ignored [replaced by linux-raspi] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | replaced by linux-raspi |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.8.0-31.31.1 |
| esm-infra/focal | ignored | superseded by linux-riscv-5.8 |
| focal | ignored | end of standard support, was ignored [superseded by linux-riscv-5.8] |
| jammy | ignored | end of kernel support |
| mantic | not-affected | 6.2.0-19.19.1 |
| noble | not-affected | 6.5.0-9.9.1 |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-riscv-5.13 |
| focal | ignored | end of standard support, was ignored [superseded by linux-riscv-5.13] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-riscv-5.13 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1015.17~20.04.1 |
| focal | not-affected | 5.15.0-1015.17~20.04.1 |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | end of kernel support |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | ignored | superseded by linux-riscv-5.11 |
| focal | ignored | end of standard support, was ignored [superseded by linux-riscv-5.11] |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-riscv-5.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-17.17.1.1~22.04.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | not-affected | 6.5.0-1002.3 |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | end of kernel support |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by linux-starfive-6.5 |
| mantic | DNE | |
| noble | DNE | |
| upstream | ignored | superseded by linux-starfive-6.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.5.0-1007.8~22.04.1 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1020.24 |
| focal | not-affected | 5.4.0-1020.24 |
| jammy | not-affected | 5.15.0-1022.26 |
| mantic | DNE | |
| noble | DNE | |
| upstream | released | 5.16~rc7, 5.15.12 |
Показывать по
EPSS
6 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI callback. If there is no XDP program attached, the veth code does not perform any share check, and shared/cloned skbs could enter the GRO engine. Ignat reported a BUG triggered later-on due to the above condition: [ 53.970529][ C1] kernel BUG at net/core/skbuff.c:3574! [ 53.981755][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 53.982634][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc5+ #25 [ 53.982634][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 [ 53.982634][ C1] RIP: 0010:skb_shift+0x13ef/0x23b0 [ 53.982634][ C1] Code: ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 41 0c 00 00 41 80 7f 02 00 ...
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI callback. If there is no XDP program attached, the veth code does not perform any share check, and shared/cloned skbs could enter the GRO engine. Ignat reported a BUG triggered later-on due to the above condition: [ 53.970529][ C1] kernel BUG at net/core/skbuff.c:3574! [ 53.981755][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 53.982634][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc5+ #25 [ 53.982634][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 [ 53.982634][ C1] RIP: 0010:skb_shift+0x13ef/0x23b0 [ 53.982634][ C1] Code: ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 41 0c 00 00 41 80 7f 02 00
In the Linux kernel, the following vulnerability has been resolved: v ...
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI callback. If there is no XDP program attached, the veth code does not perform any share check, and shared/cloned skbs could enter the GRO engine. Ignat reported a BUG triggered later-on due to the above condition: [ 53.970529][ C1] kernel BUG at net/core/skbuff.c:3574! [ 53.981755][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 53.982634][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc5+ #25 [ 53.982634][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 [ 53.982634][ C1] RIP: 0010:skb_shift+0x13ef/0x23b0 [ 53.982634][ C1] Code: ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 41 0c 00 00 41 80 7f 02...
Уязвимость компонента veth ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6 Medium
CVSS3