Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected e7096c131e5161fa3b8e52a650d7719d2857adfd before 493aa6bdcffd90a4f82aa614fe4f4db0641b4068; affected e7096c131e5161fa3b8e52a650d7719d2857adfd before 4be453271a882c8ebc28df3dbf9e4d95e6ac42f5; affected e7096c131e5161fa3b8e52a650d7719d2857adfd before 09c3fa70f65175861ca948cb2f0f791e666c90e5; affected e7096c131e5161fa3b8e52a650d7719d2857adfd before c991567e6c638079304cc15dff28748e4a3c4a37; affected e7096c131e5161fa3b8e52a650d7719d2857adfd before 93bcc1752c69bb309f4d8cfaf960ef1faeb34996; affected e7096c131e5161fa3b8e52a650d7719d2857adfd before d44bd323d8bb8031eef4bdc44547925998a11e47; affected e7096c131e5161fa3b8e52a650d7719d2857adfd before 71cbd32e3db82ea4a74e3ef9aeeaa6971969c86f |
| Linux / Linux | affected 5.6; unaffected 0 before 5.6; unaffected 5.10.215 through 5.10.*; unaffected 5.15.154 through 5.15.*; unaffected 6.1.84 through 6.1.*; unaffected 6.6.24 through 6.6.*; unaffected 6.7.12 through 6.7.*; unaffected 6.8.3 through 6.8.*; unaffected 6.9 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/493aa6bdcffd90a4f82aa614fe4f4db0641b4068
- https://git.kernel.org/stable/c/4be453271a882c8ebc28df3dbf9e4d95e6ac42f5
- https://git.kernel.org/stable/c/09c3fa70f65175861ca948cb2f0f791e666c90e5
- https://git.kernel.org/stable/c/c991567e6c638079304cc15dff28748e4a3c4a37
- https://git.kernel.org/stable/c/93bcc1752c69bb309f4d8cfaf960ef1faeb34996
- https://git.kernel.org/stable/c/d44bd323d8bb8031eef4bdc44547925998a11e47
- https://git.kernel.org/stable/c/71cbd32e3db82ea4a74e3ef9aeeaa6971969c86f
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/493aa6bdcffd90a4f82aa614fe4f4db0641b4068
- https://git.kernel.org/stable/c/4be453271a882c8ebc28df3dbf9e4d95e6ac42f5
- https://git.kernel.org/stable/c/09c3fa70f65175861ca948cb2f0f791e666c90e5
- https://git.kernel.org/stable/c/c991567e6c638079304cc15dff28748e4a3c4a37
- https://git.kernel.org/stable/c/93bcc1752c69bb309f4d8cfaf960ef1faeb34996
- https://git.kernel.org/stable/c/d44bd323d8bb8031eef4bdc44547925998a11e47
- https://git.kernel.org/stable/c/71cbd32e3db82ea4a74e3ef9aeeaa6971969c86f
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
No English description supplied.