Home

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match: fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961 fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753 inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874 Separate nexthop objects are mutually exclusive with the legacy multipath spec. Fix fib_nh_match to return if the config for the to be deleted route contains a multipath spec while the fib_info is using a nexthop object.

PUBLISHED Reserved 2024-08-22 | Published 2024-10-21 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

493ced1ac47c48bb86d9d4e8e87df8592be85a0e before cc3cd130ecfb8b0ae52e235e487bae3f16a24a32
affected

493ced1ac47c48bb86d9d4e8e87df8592be85a0e before 0b5394229ebae09afc07aabccb5ffd705ffd250e
affected

493ced1ac47c48bb86d9d4e8e87df8592be85a0e before 25174d91e4a32a24204060d283bd5fa6d0ddf133
affected

493ced1ac47c48bb86d9d4e8e87df8592be85a0e before bb20a2ae241be846bc3c11ea4b3a3c69e41d51f2
affected

493ced1ac47c48bb86d9d4e8e87df8592be85a0e before 61b91eb33a69c3be11b259c5ea484505cd79f883
affected

Default status
affected

5.3
affected

Any version before 5.3
unaffected

5.4.226
unaffected

5.10.158
unaffected

5.15.82
unaffected

6.0.12
unaffected

6.1
unaffected

References

git.kernel.org/...c/cc3cd130ecfb8b0ae52e235e487bae3f16a24a32

git.kernel.org/...c/0b5394229ebae09afc07aabccb5ffd705ffd250e

git.kernel.org/...c/25174d91e4a32a24204060d283bd5fa6d0ddf133

git.kernel.org/...c/bb20a2ae241be846bc3c11ea4b3a3c69e41d51f2

git.kernel.org/...c/61b91eb33a69c3be11b259c5ea484505cd79f883

cve.org (CVE-2022-48999)

nvd.nist.gov (CVE-2022-48999)

Download JSON