Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address similar to route_shortcircuit which already does the right thing.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected e4f67addf158f98f8197e08974966b18480dc751 before 6093baf2b2c57e7da33bacd2223570a78b416d89; affected e4f67addf158f98f8197e08974966b18480dc751 before 751cb520f9e47538b7223df133806a29fc41f54f; affected e4f67addf158f98f8197e08974966b18480dc751 before f43ef9a3f9c121472a0754c9e9bff13317ace0f7; affected e4f67addf158f98f8197e08974966b18480dc751 before ecc8bac11a101e5f6989a14b92e17b51f9761630; affected e4f67addf158f98f8197e08974966b18480dc751 before b824059a673b2283e78c7aae2c7d257aad7f0e1d |
| Linux / Linux | affected 3.8; unaffected 0 before 3.8; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.57 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/6093baf2b2c57e7da33bacd2223570a78b416d89
- https://git.kernel.org/stable/c/751cb520f9e47538b7223df133806a29fc41f54f
- https://git.kernel.org/stable/c/f43ef9a3f9c121472a0754c9e9bff13317ace0f7
- https://git.kernel.org/stable/c/ecc8bac11a101e5f6989a14b92e17b51f9761630
- https://git.kernel.org/stable/c/b824059a673b2283e78c7aae2c7d257aad7f0e1d