2024-07-12 13:00:50 +00:00
{
2024-07-29 07:00:37 +00:00
"data_version" : "4.0" ,
2024-07-12 13:00:50 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2024-41090" ,
2024-07-29 07:00:37 +00:00
"ASSIGNER" : "cve@kernel.org" ,
"STATE" : "PUBLIC"
2024-07-12 13:00:50 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2024-07-29 07:00:37 +00:00
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ntap: add missing verification for short frame\n\nThe cited commit missed to check against the validity of the frame length\nin the tap_get_user_xdp() path, which could cause a corrupted skb to be\nsent downstack. Even before the skb is transmitted, the\ntap_get_user_xdp()-->skb_set_network_header() may assume the size is more\nthan ETH_HLEN. Once transmitted, this could either cause out-of-bound\naccess beyond the actual length, or confuse the underlayer with incorrect\nor inconsistent header length in the skb metadata.\n\nIn the alternative path, tap_get_user() already prohibits short frame which\nhas the length less than Ethernet header size from being transmitted.\n\nThis is to drop any frame shorter than the Ethernet header size just like\nhow tap_get_user() does.\n\nCVE: CVE-2024-41090"
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
2024-07-12 13:00:50 +00:00
}
]
2024-07-29 07:00:37 +00:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Linux" ,
"product" : {
"product_data" : [
{
"product_name" : "Linux" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_name" : "0efac27791ee" ,
"version_value" : "8be915fc5ff9"
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "4.20" ,
"status" : "affected"
} ,
{
"version" : "0" ,
"lessThan" : "4.20" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "5.4.281" ,
"lessThanOrEqual" : "5.4.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "5.10.223" ,
"lessThanOrEqual" : "5.10.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "5.15.164" ,
"lessThanOrEqual" : "5.15.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "6.1.102" ,
"lessThanOrEqual" : "6.1.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "6.6.43" ,
"lessThanOrEqual" : "6.6.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "6.9.12" ,
"lessThanOrEqual" : "6.9.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
"version" : "6.10.2" ,
"lessThanOrEqual" : "6.10.*" ,
"status" : "unaffected" ,
2024-11-05 10:02:17 +00:00
"versionType" : "semver"
2024-07-29 07:00:37 +00:00
} ,
{
2024-09-15 18:01:03 +00:00
"version" : "6.11" ,
2024-07-29 07:00:37 +00:00
"lessThanOrEqual" : "*" ,
"status" : "unaffected" ,
"versionType" : "original_commit_for_fix"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://git.kernel.org/stable/c/8be915fc5ff9a5e296f6538be12ea75a1a93bdea" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/8be915fc5ff9a5e296f6538be12ea75a1a93bdea"
} ,
{
"url" : "https://git.kernel.org/stable/c/7431144b406ae82807eb87d8c98e518475b0450f" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/7431144b406ae82807eb87d8c98e518475b0450f"
} ,
{
"url" : "https://git.kernel.org/stable/c/e5e5e63c506b93b89b01f522b6a7343585f784e6" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/e5e5e63c506b93b89b01f522b6a7343585f784e6"
} ,
{
"url" : "https://git.kernel.org/stable/c/ee93e6da30377cf2a75e16cd32bb9fcd86a61c46" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/ee93e6da30377cf2a75e16cd32bb9fcd86a61c46"
} ,
{
"url" : "https://git.kernel.org/stable/c/aa6a5704cab861c9b2ae9f475076e1881e87f5aa" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/aa6a5704cab861c9b2ae9f475076e1881e87f5aa"
} ,
{
"url" : "https://git.kernel.org/stable/c/73d462a38d5f782b7c872fe9ae8393d9ef5483da" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/73d462a38d5f782b7c872fe9ae8393d9ef5483da"
} ,
{
"url" : "https://git.kernel.org/stable/c/e1a786b9bbb767fd1c922d424aaa8078cc542309" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/e1a786b9bbb767fd1c922d424aaa8078cc542309"
} ,
{
"url" : "https://git.kernel.org/stable/c/ed7f2afdd0e043a397677e597ced0830b83ba0b3" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/ed7f2afdd0e043a397677e597ced0830b83ba0b3"
}
]
} ,
"generator" : {
2024-11-05 10:02:17 +00:00
"engine" : "bippy-9e1c9544281a"
2024-07-12 13:00:50 +00:00
}
}
