CVE-2024-35889

Summary

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix kernel panic on unknown packet types

In the very rare case where a packet type is unknown to the driver, idpf_rx_process_skb_fields would return early without calling eth_type_trans to set the skb protocol / the network layer handler. This is especially problematic if tcpdump is running when such a packet is received, i.e. it would cause a kernel panic.

Instead, call eth_type_trans for every single packet, even when the packet type is unknown.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux3a8845af66edb340ba9210bb8a0da040c7d6e590 < b4d28f7fa4dd531cf503a4fe1ca7008960cc5832affected
LinuxLinux3a8845af66edb340ba9210bb8a0da040c7d6e590 < dd19e827d63ac60debf117676d1126bff884bdb8affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.8.5 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References