In the Linux kernel, the following vulnerability has been resolved:
net: core: reject skbcopy(expand) for fraglist GSO skbs
SKBGSOFRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skbcopy or skbcopyexpand, in order to prevent a crash on a potential later call to skbgso_segment.
{ "vanir_signatures": [ { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy" }, "deprecated": false, "digest": { "length": 433.0, "function_hash": "272894711771859872166243611386144100393" }, "id": "CVE-2024-36929-04d5d66e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@989bf6fd1e1d058e73a364dce1a0c53d33373f62" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/core/skbuff.c" }, "deprecated": false, "digest": { "line_hashes": [ "161097194870350482933545046142225239037", "96267881534528548664208203396928213599", "294574847687483747020065303979831232274", "80456921635050510676657263440393707412", "336904809994432904447631751640010850258", "101695540381008805744806086339877861795", "288154147846348087618645737462349354154", "76425509078697234774023127785501291469", "171996915302135395548204996205839767467", "311583265249435447766398020668601161644", "87714191202734078222634471667417126922", "166514359086727773642801833982943221182", "274835749624187966883886176294989677497", "80852032104024951375673956503819533407", "303170387729868581019060709596428265822" ], "threshold": 0.9 }, "id": "CVE-2024-36929-219105fd", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@989bf6fd1e1d058e73a364dce1a0c53d33373f62" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/core/skbuff.c" }, "deprecated": false, "digest": { "line_hashes": [ "161097194870350482933545046142225239037", "96267881534528548664208203396928213599", "294574847687483747020065303979831232274", "80456921635050510676657263440393707412", "336904809994432904447631751640010850258", "101695540381008805744806086339877861795", "288154147846348087618645737462349354154", "76425509078697234774023127785501291469", "171996915302135395548204996205839767467", "311583265249435447766398020668601161644", "87714191202734078222634471667417126922", "166514359086727773642801833982943221182", "274835749624187966883886176294989677497", "80852032104024951375673956503819533407", "303170387729868581019060709596428265822" ], "threshold": 0.9 }, "id": "CVE-2024-36929-35d84eb5", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d091e579b864fa790dd6a0cd537a22c383126681" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy_expand" }, "deprecated": false, "digest": { "length": 564.0, "function_hash": "245325326638176590481740057702043560422" }, "id": "CVE-2024-36929-425870a4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aea5e2669c2863fdd8679c40ee310b3bcaa85aec" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy" }, "deprecated": false, "digest": { "length": 433.0, "function_hash": "272894711771859872166243611386144100393" }, "id": "CVE-2024-36929-4f6cc9d2", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faa83a7797f06cefed86731ba4baa3b4dfdc06c1" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy_expand" }, "deprecated": false, "digest": { "length": 564.0, "function_hash": "245325326638176590481740057702043560422" }, "id": "CVE-2024-36929-56b98eb6", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faa83a7797f06cefed86731ba4baa3b4dfdc06c1" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/core/skbuff.c" }, "deprecated": false, "digest": { "line_hashes": [ "161097194870350482933545046142225239037", "96267881534528548664208203396928213599", "294574847687483747020065303979831232274", "80456921635050510676657263440393707412", "336904809994432904447631751640010850258", "101695540381008805744806086339877861795", "288154147846348087618645737462349354154", "76425509078697234774023127785501291469", "171996915302135395548204996205839767467", "311583265249435447766398020668601161644", "87714191202734078222634471667417126922", "166514359086727773642801833982943221182", "274835749624187966883886176294989677497", "80852032104024951375673956503819533407", "303170387729868581019060709596428265822" ], "threshold": 0.9 }, "id": "CVE-2024-36929-65fe1be7", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faa83a7797f06cefed86731ba4baa3b4dfdc06c1" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy" }, "deprecated": false, "digest": { "length": 433.0, "function_hash": "272894711771859872166243611386144100393" }, "id": "CVE-2024-36929-8278bcdb", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aea5e2669c2863fdd8679c40ee310b3bcaa85aec" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy_expand" }, "deprecated": false, "digest": { "length": 564.0, "function_hash": "245325326638176590481740057702043560422" }, "id": "CVE-2024-36929-852bb83c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@989bf6fd1e1d058e73a364dce1a0c53d33373f62" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/core/skbuff.c" }, "deprecated": false, "digest": { "line_hashes": [ "161097194870350482933545046142225239037", "96267881534528548664208203396928213599", "294574847687483747020065303979831232274", "80456921635050510676657263440393707412", "336904809994432904447631751640010850258", "101695540381008805744806086339877861795", "288154147846348087618645737462349354154", "76425509078697234774023127785501291469", "171996915302135395548204996205839767467", "311583265249435447766398020668601161644", "87714191202734078222634471667417126922", "166514359086727773642801833982943221182", "274835749624187966883886176294989677497", "80852032104024951375673956503819533407", "303170387729868581019060709596428265822" ], "threshold": 0.9 }, "id": "CVE-2024-36929-a8f74665", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe34d86ef9765c388f145039006bb79b6c81ac6" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy" }, "deprecated": false, "digest": { "length": 433.0, "function_hash": "272894711771859872166243611386144100393" }, "id": "CVE-2024-36929-c0f01c0d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d091e579b864fa790dd6a0cd537a22c383126681" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy_expand" }, "deprecated": false, "digest": { "length": 564.0, "function_hash": "245325326638176590481740057702043560422" }, "id": "CVE-2024-36929-c2a4b987", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe34d86ef9765c388f145039006bb79b6c81ac6" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy" }, "deprecated": false, "digest": { "length": 433.0, "function_hash": "272894711771859872166243611386144100393" }, "id": "CVE-2024-36929-c6ddf68a", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe34d86ef9765c388f145039006bb79b6c81ac6" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy_expand" }, "deprecated": false, "digest": { "length": 564.0, "function_hash": "245325326638176590481740057702043560422" }, "id": "CVE-2024-36929-c9ff920c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d091e579b864fa790dd6a0cd537a22c383126681" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy_expand" }, "deprecated": false, "digest": { "length": 564.0, "function_hash": "245325326638176590481740057702043560422" }, "id": "CVE-2024-36929-d319e3f3", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7af99cc21923a9650533c9d77265c8dd683a533" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/core/skbuff.c" }, "deprecated": false, "digest": { "line_hashes": [ "161097194870350482933545046142225239037", "96267881534528548664208203396928213599", "294574847687483747020065303979831232274", "80456921635050510676657263440393707412", "336904809994432904447631751640010850258", "101695540381008805744806086339877861795", "288154147846348087618645737462349354154", "76425509078697234774023127785501291469", "171996915302135395548204996205839767467", "311583265249435447766398020668601161644", "87714191202734078222634471667417126922", "166514359086727773642801833982943221182", "274835749624187966883886176294989677497", "80852032104024951375673956503819533407", "303170387729868581019060709596428265822" ], "threshold": 0.9 }, "id": "CVE-2024-36929-f0919ea6", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aea5e2669c2863fdd8679c40ee310b3bcaa85aec" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/core/skbuff.c" }, "deprecated": false, "digest": { "line_hashes": [ "161097194870350482933545046142225239037", "96267881534528548664208203396928213599", "294574847687483747020065303979831232274", "80456921635050510676657263440393707412", "336904809994432904447631751640010850258", "101695540381008805744806086339877861795", "288154147846348087618645737462349354154", "76425509078697234774023127785501291469", "171996915302135395548204996205839767467", "311583265249435447766398020668601161644", "87714191202734078222634471667417126922", "166514359086727773642801833982943221182", "274835749624187966883886176294989677497", "80852032104024951375673956503819533407", "303170387729868581019060709596428265822" ], "threshold": 0.9 }, "id": "CVE-2024-36929-f1865079", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7af99cc21923a9650533c9d77265c8dd683a533" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "net/core/skbuff.c", "function": "skb_copy" }, "deprecated": false, "digest": { "length": 433.0, "function_hash": "272894711771859872166243611386144100393" }, "id": "CVE-2024-36929-f3f070af", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7af99cc21923a9650533c9d77265c8dd683a533" } ] }