Linux Kernel Vulnerability Affecting UDP Segmentation

CVE-2022-50365

What is CVE-2022-50365?

In the Linux kernel, a vulnerability exists that affects the handling of tail adjustments during pull operations. This issue arises when a program utilizes a helper function like BPF_FUNC_skb_pull_data to access partial content that exceeds the head length of a socket buffer (skb). If all socket buffers in the Generic Segmentation Offload (GSO) fragment list are linear without a head fragment, it can lead to unexpected behaviors, including potential kernel bugs, as observed in specific operations like UDP packet segmentation. To address this issue, there is a need to mark packets accordingly to handle tail updates properly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References