High · published September 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
net: dpaa: Pad packets to ETH_ZLEN
When sending packets under 60 bytes, up to three bytes of the buffer
following the data may be leaked. Avoid this by extending all packets to
ETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be
reproduced by running
$ ping -s 11 destination
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.10, < 6.1.111 | 6.1.111 |
| linux/linux_kernel | ≥ 6.2, < 6.6.52 | 6.6.52 |
| linux/linux_kernel | ≥ 6.7, < 6.10.11 | 6.10.11 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |