CVE-2024-36929
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-36929
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36929.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-36929
- Downstream
- Related
- Published
- 2024-05-30T15:29:21.430Z
- Modified
- 2025-11-28T02:33:58.724833Z
- Summary
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: core: reject skbcopy(expand) for fraglist GSO skbs
SKBGSOFRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skbcopy or skbcopyexpand, in order to prevent a crash on a potential later call to skbgso_segment.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36929.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/989bf6fd1e1d058e73a364dce1a0c53d33373f62
- https://git.kernel.org/stable/c/aea5e2669c2863fdd8679c40ee310b3bcaa85aec
- https://git.kernel.org/stable/c/c7af99cc21923a9650533c9d77265c8dd683a533
- https://git.kernel.org/stable/c/cfe34d86ef9765c388f145039006bb79b6c81ac6
- https://git.kernel.org/stable/c/d091e579b864fa790dd6a0cd537a22c383126681
- https://git.kernel.org/stable/c/faa83a7797f06cefed86731ba4baa3b4dfdc06c1
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36929.json
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-36929
- https://security.netapp.com/advisory/ntap-20240905-0010/
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3a1296a38d0cf62bffb9a03c585cbd5dbf15d596Fixedfaa83a7797f06cefed86731ba4baa3b4dfdc06c1Fixedc7af99cc21923a9650533c9d77265c8dd683a533Fixed989bf6fd1e1d058e73a364dce1a0c53d33373f62Fixedcfe34d86ef9765c388f145039006bb79b6c81ac6Fixedaea5e2669c2863fdd8679c40ee310b3bcaa85aecFixedd091e579b864fa790dd6a0cd537a22c383126681