High · published May 15, 2021
The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 2.6.28, < 4.9.298 | 4.9.298 |
| linux/linux_kernel | ≥ 4.10, < 4.14.226 | 4.14.226 |
| linux/linux_kernel | ≥ 4.15, < 4.19.181 | 4.19.181 |
| linux/linux_kernel | ≥ 4.20, < 5.4.106 | 5.4.106 |
| linux/linux_kernel | ≥ 5.5, < 5.10.24 | 5.10.24 |
| linux/linux_kernel | ≥ 5.11, < 5.11.7 | 5.11.7 |