In the Linux kernel, the following vulnerability has been resolved:
net: core: reject skbcopy(expand) for fraglist GSO skbs
SKBGSOFRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skbcopy or skbcopyexpand, in order to prevent a crash on a potential later call to skbgso_segment.
[
{
"id": "CVE-2024-36929-04d5d66e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@989bf6fd1e1d058e73a364dce1a0c53d33373f62",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "272894711771859872166243611386144100393",
"length": 433.0
},
"target": {
"function": "skb_copy",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-219105fd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@989bf6fd1e1d058e73a364dce1a0c53d33373f62",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161097194870350482933545046142225239037",
"96267881534528548664208203396928213599",
"294574847687483747020065303979831232274",
"80456921635050510676657263440393707412",
"336904809994432904447631751640010850258",
"101695540381008805744806086339877861795",
"288154147846348087618645737462349354154",
"76425509078697234774023127785501291469",
"171996915302135395548204996205839767467",
"311583265249435447766398020668601161644",
"87714191202734078222634471667417126922",
"166514359086727773642801833982943221182",
"274835749624187966883886176294989677497",
"80852032104024951375673956503819533407",
"303170387729868581019060709596428265822"
]
},
"target": {
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-35d84eb5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d091e579b864fa790dd6a0cd537a22c383126681",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161097194870350482933545046142225239037",
"96267881534528548664208203396928213599",
"294574847687483747020065303979831232274",
"80456921635050510676657263440393707412",
"336904809994432904447631751640010850258",
"101695540381008805744806086339877861795",
"288154147846348087618645737462349354154",
"76425509078697234774023127785501291469",
"171996915302135395548204996205839767467",
"311583265249435447766398020668601161644",
"87714191202734078222634471667417126922",
"166514359086727773642801833982943221182",
"274835749624187966883886176294989677497",
"80852032104024951375673956503819533407",
"303170387729868581019060709596428265822"
]
},
"target": {
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-425870a4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aea5e2669c2863fdd8679c40ee310b3bcaa85aec",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "245325326638176590481740057702043560422",
"length": 564.0
},
"target": {
"function": "skb_copy_expand",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-4f6cc9d2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faa83a7797f06cefed86731ba4baa3b4dfdc06c1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "272894711771859872166243611386144100393",
"length": 433.0
},
"target": {
"function": "skb_copy",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-56b98eb6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faa83a7797f06cefed86731ba4baa3b4dfdc06c1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "245325326638176590481740057702043560422",
"length": 564.0
},
"target": {
"function": "skb_copy_expand",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-65fe1be7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faa83a7797f06cefed86731ba4baa3b4dfdc06c1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161097194870350482933545046142225239037",
"96267881534528548664208203396928213599",
"294574847687483747020065303979831232274",
"80456921635050510676657263440393707412",
"336904809994432904447631751640010850258",
"101695540381008805744806086339877861795",
"288154147846348087618645737462349354154",
"76425509078697234774023127785501291469",
"171996915302135395548204996205839767467",
"311583265249435447766398020668601161644",
"87714191202734078222634471667417126922",
"166514359086727773642801833982943221182",
"274835749624187966883886176294989677497",
"80852032104024951375673956503819533407",
"303170387729868581019060709596428265822"
]
},
"target": {
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-8278bcdb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aea5e2669c2863fdd8679c40ee310b3bcaa85aec",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "272894711771859872166243611386144100393",
"length": 433.0
},
"target": {
"function": "skb_copy",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-852bb83c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@989bf6fd1e1d058e73a364dce1a0c53d33373f62",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "245325326638176590481740057702043560422",
"length": 564.0
},
"target": {
"function": "skb_copy_expand",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-a8f74665",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe34d86ef9765c388f145039006bb79b6c81ac6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161097194870350482933545046142225239037",
"96267881534528548664208203396928213599",
"294574847687483747020065303979831232274",
"80456921635050510676657263440393707412",
"336904809994432904447631751640010850258",
"101695540381008805744806086339877861795",
"288154147846348087618645737462349354154",
"76425509078697234774023127785501291469",
"171996915302135395548204996205839767467",
"311583265249435447766398020668601161644",
"87714191202734078222634471667417126922",
"166514359086727773642801833982943221182",
"274835749624187966883886176294989677497",
"80852032104024951375673956503819533407",
"303170387729868581019060709596428265822"
]
},
"target": {
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-c0f01c0d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d091e579b864fa790dd6a0cd537a22c383126681",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "272894711771859872166243611386144100393",
"length": 433.0
},
"target": {
"function": "skb_copy",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-c2a4b987",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe34d86ef9765c388f145039006bb79b6c81ac6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "245325326638176590481740057702043560422",
"length": 564.0
},
"target": {
"function": "skb_copy_expand",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-c6ddf68a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe34d86ef9765c388f145039006bb79b6c81ac6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "272894711771859872166243611386144100393",
"length": 433.0
},
"target": {
"function": "skb_copy",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-c9ff920c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d091e579b864fa790dd6a0cd537a22c383126681",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "245325326638176590481740057702043560422",
"length": 564.0
},
"target": {
"function": "skb_copy_expand",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-d319e3f3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7af99cc21923a9650533c9d77265c8dd683a533",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "245325326638176590481740057702043560422",
"length": 564.0
},
"target": {
"function": "skb_copy_expand",
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-f0919ea6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aea5e2669c2863fdd8679c40ee310b3bcaa85aec",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161097194870350482933545046142225239037",
"96267881534528548664208203396928213599",
"294574847687483747020065303979831232274",
"80456921635050510676657263440393707412",
"336904809994432904447631751640010850258",
"101695540381008805744806086339877861795",
"288154147846348087618645737462349354154",
"76425509078697234774023127785501291469",
"171996915302135395548204996205839767467",
"311583265249435447766398020668601161644",
"87714191202734078222634471667417126922",
"166514359086727773642801833982943221182",
"274835749624187966883886176294989677497",
"80852032104024951375673956503819533407",
"303170387729868581019060709596428265822"
]
},
"target": {
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-f1865079",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7af99cc21923a9650533c9d77265c8dd683a533",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161097194870350482933545046142225239037",
"96267881534528548664208203396928213599",
"294574847687483747020065303979831232274",
"80456921635050510676657263440393707412",
"336904809994432904447631751640010850258",
"101695540381008805744806086339877861795",
"288154147846348087618645737462349354154",
"76425509078697234774023127785501291469",
"171996915302135395548204996205839767467",
"311583265249435447766398020668601161644",
"87714191202734078222634471667417126922",
"166514359086727773642801833982943221182",
"274835749624187966883886176294989677497",
"80852032104024951375673956503819533407",
"303170387729868581019060709596428265822"
]
},
"target": {
"file": "net/core/skbuff.c"
}
},
{
"id": "CVE-2024-36929-f3f070af",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7af99cc21923a9650533c9d77265c8dd683a533",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "272894711771859872166243611386144100393",
"length": 433.0
},
"target": {
"function": "skb_copy",
"file": "net/core/skbuff.c"
}
}
]