In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_size because it may trigger a BUG_ON() later when the skb is segmented as described in [1,2].

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/11ec79f5c7f74261874744039bc1551023edd6b2 cve-icon cve-icon
https://git.kernel.org/stable/c/a689f5eb13a90f892a088865478b3cd39f53d5dc cve-icon cve-icon
https://git.kernel.org/stable/c/c3496314c53e7e82ddb544c825defc3e8c0e45cf cve-icon cve-icon
https://git.kernel.org/stable/c/dda518dea60d556a2d171c0122ca7d9fdb7d473a cve-icon cve-icon
https://git.kernel.org/stable/c/ec4eea14d75f7b0491194dd413f540dd19b8c733 cve-icon cve-icon
https://git.kernel.org/stable/c/f6bb8c90cab97a3e03f8d30e3069efe6a742e0be cve-icon cve-icon
https://git.kernel.org/stable/c/fa5ef655615a01533035c6139248c5b33aa27028 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024081743-CVE-2024-42281-780b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-42281 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-42281 cve-icon
History

Thu, 12 Sep 2024 10:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 19 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 19 Aug 2024 04:45:00 +0000

Type Values Removed Values Added
References

Sat, 17 Aug 2024 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_size because it may trigger a BUG_ON() later when the skb is segmented as described in [1,2].
Title bpf: Fix a segment issue when downgrading gso_size
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-08-17T09:08:48.477Z

Updated: 2024-11-05T09:39:38.840Z

Reserved: 2024-07-30T07:40:12.261Z

Link: CVE-2024-42281

cve-icon Vulnrichment

Updated: 2024-09-11T12:42:23.787Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-08-17T09:15:09.013

Modified: 2024-08-19T12:59:59.177

Link: CVE-2024-42281

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-08-17T00:00:00Z

Links: CVE-2024-42281 - Bugzilla