Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'ppp_async_encode()' assumes valid LCP packets (with code from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that LCP packet has an actual body beyond PPP_LCP header bytes, and reject claimed-as-LCP but actually malformed data otherwise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 97d1efd8be26615ff680cdde86937d5943138f37; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6e8f1c21174f9482033bbb59f13ce1a8cbe843c3; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3ba12c2afd933fc1bf800f6d3f6c7ec8f602ce56; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ebc5c630457783d17d0c438b0ad70b232a64a82f; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3134bdf7356ed952dcecb480861d2afcc1e40492; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 099502ca410922b56353ccef2749bc0de669da78; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d683e7f3fc48f59576af34631b4fb07fd931343e; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f2aeb7306a898e1cbd03963d376f4b6656ca2b55 |
| Linux / Linux | affected 2.6.12; unaffected 0 before 2.6.12; unaffected 4.19.318 through 4.19.*; unaffected 5.4.280 through 5.4.*; unaffected 5.10.222 through 5.10.*; unaffected 5.15.163 through 5.15.*; unaffected 6.1.100 through 6.1.*; unaffected 6.6.41 through 6.6.*; unaffected 6.9.10 through 6.9.*; unaffected 6.10 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/97d1efd8be26615ff680cdde86937d5943138f37
- https://git.kernel.org/stable/c/6e8f1c21174f9482033bbb59f13ce1a8cbe843c3
- https://git.kernel.org/stable/c/3ba12c2afd933fc1bf800f6d3f6c7ec8f602ce56
- https://git.kernel.org/stable/c/ebc5c630457783d17d0c438b0ad70b232a64a82f
- https://git.kernel.org/stable/c/3134bdf7356ed952dcecb480861d2afcc1e40492
- https://git.kernel.org/stable/c/099502ca410922b56353ccef2749bc0de669da78
- https://git.kernel.org/stable/c/d683e7f3fc48f59576af34631b4fb07fd931343e
- https://git.kernel.org/stable/c/f2aeb7306a898e1cbd03963d376f4b6656ca2b55
ADP enrichment
No English description supplied.
- https://git.kernel.org/stable/c/97d1efd8be26615ff680cdde86937d5943138f37
- https://git.kernel.org/stable/c/6e8f1c21174f9482033bbb59f13ce1a8cbe843c3
- https://git.kernel.org/stable/c/3ba12c2afd933fc1bf800f6d3f6c7ec8f602ce56
- https://git.kernel.org/stable/c/ebc5c630457783d17d0c438b0ad70b232a64a82f
- https://git.kernel.org/stable/c/3134bdf7356ed952dcecb480861d2afcc1e40492
- https://git.kernel.org/stable/c/099502ca410922b56353ccef2749bc0de669da78
- https://git.kernel.org/stable/c/d683e7f3fc48f59576af34631b4fb07fd931343e
- https://git.kernel.org/stable/c/f2aeb7306a898e1cbd03963d376f4b6656ca2b55
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
No English description supplied.
No references supplied.