ACK: [SRU OEM-5.17 0/1] CVE-2023-3812

Cengiz Can cengiz.can at canonical.com
Fri Aug 4 19:47:38 UTC 2023


On Fri, 2023-08-04 at 11:16 -0300, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
>  An out-of-bounds memory access flaw was found in the Linux kernel's
> TUN/TAP
>  device driver functionality in how a user generates a malicious (too
> big)
>  networking packet when napi frags is enabled. This flaw allows a
> local user
>  to crash or potentially escalate their privileges on the system.
> 
> [Potential regression]
> TUN/TAP users may find regressions.
> 
> Ziyang Xuan (1):
>   net: tun: fix bugs for oversize packet when napi frags enabled

Acked-by: Cengiz Can <cengiz.can at canonical.com>

> 
>  drivers/net/tun.c | 3 ++-
>  1 file changed, 2 insertions(+), 1 deletion(-)
> 
> -- 
> 2.34.1
> 
> 




More information about the kernel-team mailing list