In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev<\/p>\n
ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(),
\nbut leave needed_headroom and needed_tailroom set to 0.<\/p>\n
When the underlying phy_dev (or stacked lower device) requires extra headroom
\nor tailroom for headers\/trailers (e.g. macsec, ipsec, wireguard, tunnels, or
\nveth with rx headroom), upper layers calculating packet headroom and tailroom
\nfail to reserve sufficient space.<\/p>\n
This can result in reallocation overhead, skb headroom underflows, or KASAN
\nslab-use-after-free crashes when dev_hard_header() \/ ipvlan_hard_header()
\nprepends header data or when lower devices append tailroom.<\/p>\n
Fix this by:
\n1. Inheriting needed_headroom and needed_tailroom from phy_dev in ipvlan_init().
\n2. Propagating needed_headroom and needed_tailroom updates to attached ipvlans
\n in ipvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev<\/p>\n
ipvlan devices inherit hard_header_len from phy_dev during ipvlan<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11925","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11925","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}