ACK: [SRU OEM-5.17 0/1] CVE-2023-3812

Tim Gardner tim.gardner at canonical.com
Fri Aug 4 16:20:01 UTC 2023


On 8/4/23 8:16 AM, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
>   An out-of-bounds memory access flaw was found in the Linux kernel's TUN/TAP
>   device driver functionality in how a user generates a malicious (too big)
>   networking packet when napi frags is enabled. This flaw allows a local user
>   to crash or potentially escalate their privileges on the system.
> 
> [Potential regression]
> TUN/TAP users may find regressions.
> 
> Ziyang Xuan (1):
>    net: tun: fix bugs for oversize packet when napi frags enabled
> 
>   drivers/net/tun.c | 3 ++-
>   1 file changed, 2 insertions(+), 1 deletion(-)
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc




More information about the kernel-team mailing list