Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current->nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2). The 'pernet' structure can be obtained from the table->data using container_of().
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 27069e7cb3d1cea9377069266acf19b9cc5ad0ae before 4c74fbdc5ab95b13945be01e6065940b68222db7; affected 27069e7cb3d1cea9377069266acf19b9cc5ad0ae before 92cf7a51bdae24a32c592adcdd59a773ae149289 |
| Linux / Linux | affected 6.12; unaffected 0 before 6.12; unaffected 6.12.10 through 6.12.*; unaffected 6.13 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/4c74fbdc5ab95b13945be01e6065940b68222db7
- https://git.kernel.org/stable/c/92cf7a51bdae24a32c592adcdd59a773ae149289
ADP enrichment
No English description supplied.
No references supplied.