In the Linux kernel, the following vulnerability has been resolved: net: use sockgenput() when skstate is TCPTIMEWAIT It is possible for a pointer of type struct inettimewaitsock to be returned from the functions _inetlookupestablished() and _inet6lookupestablished(). This can cause a crash when the returned pointer is of type struct inettimewaitsock and sockput() is called on it. The following is a crash call stack that shows sk->skwmemalloc being accessed in skfree() during the call to sockput() on a struct inettimewaitsock pointer. To avoid this issue, use sockgenput() instead of sockput() when sk->skstate is TCPTIMEWAIT. mrdump.ko ipanic() + 120 vmlinux notifiercallchain(nrtocall=-1, nrcalls=0) + 132 vmlinux atomicnotifiercallchain(val=0) + 56 vmlinux panic() + 344 vmlinux addtaint() + 164 vmlinux endreport() + 136 vmlinux kasanreport(size=0) + 236 vmlinux reporttagfault() + 16 vmlinux dotagrecovery() + 16 vmlinux _dokernelfault() + 88 vmlinux dobadarea() + 28 vmlinux dotagcheckfault() + 60 vmlinux domemabort() + 80 vmlinux el1abort() + 56 vmlinux el1h64synchandler() + 124 vmlinux > 0xFFFFFFC080011294() vmlinux _lseatomicfetchaddrelease(v=0xF2FFFF82A896087C) vmlinux _lseatomicfetchsubrelease(v=0xF2FFFF82A896087C) vmlinux archatomicfetchsubrelease(i=1, v=0xF2FFFF82A896087C) + 8 vmlinux rawatomicfetchsubrelease(i=1, v=0xF2FFFF82A896087C) + 8 vmlinux atomicfetchsubrelease(i=1, v=0xF2FFFF82A896087C) + 8 vmlinux _refcountsubandtest(i=1, r=0xF2FFFF82A896087C, oldp=0) + 8 vmlinux _refcountdecandtest(r=0xF2FFFF82A896087C, oldp=0) + 8 vmlinux refcountdecandtest(r=0xF2FFFF82A896087C) + 8 vmlinux skfree(sk=0xF2FFFF82A8960700) + 28 vmlinux sockput() + 48 vmlinux tcp6checkfraglistgro() + 236 vmlinux tcp6groreceive() + 624 vmlinux ipv6groreceive() + 912 vmlinux devgroreceive() + 1116 vmlinux napigroreceive() + 196 ccmni.ko ccmnirxcallback() + 208 ccmni.ko ccmniqueuerecvskb() + 388 cccidpmaif.ko dpmaifrxqpush_thread() + 1088 vmlinux kthread() + 268 vmlinux 0xFFFFFFC08001F30C()
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-headers-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-image-unsigned-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-image-unsigned-6.14.0-1007-oem-dbgsym", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-ipu6-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-ipu7-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-usbio-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-vision-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-oem-6.14-headers-6.14.0-1007", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-oem-6.14-tools-6.14.0-1007", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-tools-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-riscv-6.14-headers-6.14.0-24", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-riscv-6.14-tools-6.14.0-24", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "bpftool", "binary_version": "7.6.0+6.14.0-24.24" }, { "binary_name": "linux-bpf-dev", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-buildinfo-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-common", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-doc", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-64k-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-lib-rust-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-libc-dev", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-extra-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-ipu6-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-ipu7-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-usbio-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-vision-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-perf", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-source-6.14.0", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-common", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-host", "binary_version": "6.14.0-24.24" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-buildinfo-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-gcp-headers-6.14.0-1011", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-gcp-tools-6.14.0-1011", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-headers-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-headers-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k-dbgsym", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-dbgsym", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-tools-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-tools-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-6.14.0-1009-raspi-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-raspi-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-raspi-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-cloud-tools-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-headers-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.14.0-1006-realtime-dbgsym", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-extra-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-cloud-tools-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-headers-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-tools-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-tools-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-riscv-headers-6.14.0-24", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-riscv-tools-6.14.0-24", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" } ] }