CVE-2024-36929
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-36929
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36929.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-36929
- Downstream
- Related
- Published
- 2024-05-30T16:15:16Z
- Modified
- 2025-08-09T19:01:29Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: core: reject skbcopy(expand) for fraglist GSO skbs
SKBGSOFRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skbcopy or skbcopyexpand, in order to prevent a crash on a potential later call to skbgso_segment.
- References
-
- https://security.netapp.com/advisory/ntap-20240905-0010/
- https://git.kernel.org/stable/c/989bf6fd1e1d058e73a364dce1a0c53d33373f62
- https://git.kernel.org/stable/c/aea5e2669c2863fdd8679c40ee310b3bcaa85aec
- https://git.kernel.org/stable/c/c7af99cc21923a9650533c9d77265c8dd683a533
- https://git.kernel.org/stable/c/cfe34d86ef9765c388f145039006bb79b6c81ac6
- https://git.kernel.org/stable/c/d091e579b864fa790dd6a0cd537a22c383126681
- https://git.kernel.org/stable/c/faa83a7797f06cefed86731ba4baa3b4dfdc06c1
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html