Overview
Original source dataIn the Linux kernel, the following vulnerability has been resolved:
ipv4: validate checksum_start before completing checksum
If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief.
This was discovered and reported by Paulos, and has been reporoduced by others independently since.
We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum.
A more complete validation at input is forthcoming, but needs more work.
Affected products and scope
The analysis could not be completed. The original vulnerability data remains available below.
Technical details
The analysis could not be completed. The original vulnerability data remains available below.
Exploitability
The analysis could not be completed. The original vulnerability data remains available below.
Technical impact
The analysis could not be completed. The original vulnerability data remains available below.
Business impact
The analysis could not be completed. The original vulnerability data remains available below.
Remediation
The analysis could not be completed. The original vulnerability data remains available below.
Detection
The analysis could not be completed. The original vulnerability data remains available below.
Sources (18)
Linux (CNA)
