Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 before e61dfd906ad027a4ade1f89e5fe706a3fcd52527; affected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 before bc2b881a0896c111c1041d8bb1f92a3b3873ace5; affected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 before 06da08d9355bf8e2070459bbedbe372ccc02cc0e; affected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 before b62a59c18b692f892dcb8109c1c2e653b2abc95c |
| Linux / Linux | affected 4.12; unaffected 0 before 4.12; unaffected 6.6.160 through 6.6.*; unaffected 6.12.58 through 6.12.*; unaffected 6.17.8 through 6.17.*; unaffected 6.18 through * |
CWE
No CWE identifiers supplied.