CVE-2024-49978

gso: fix udp gso fraglist segmentation after pull from frag_list

References

Notes

 carnil> Introduced in 9fd1ff5d2ac7 ("udp: Support UDP fraglist GRO/GSO."). Vulnerable
 carnil> versions: 5.6-rc1.

Bugs

Status

Branch Status
upstream released (6.12-rc2) [a1e40ac5b5e9077fe1f7ae0eb88034db0f9ae1ab]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.11-upstream-stable released (6.11.3) [3cd00d2e3655fad3bda96dc1ebf17b6495f86fea]
6.10-upstream-stable released (6.10.14) [33e28acf42ee863f332a958bfc2f1a284a3659df]
6.6-upstream-stable released (6.6.55) [af3122f5fdc0d00581d6e598a668df6bf54c9daa]
6.1-upstream-stable released (6.1.113) [080e6c9a3908de193a48f646c5ce1bfb15676ffc]
5.10-upstream-stable needed
4.19-upstream-stable N/A "Vulnerable code not present"
sid released (6.11.4-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security released (6.1.115-1)
5.10-bullseye-security needed