seg6: Fix validation of nexthop addresses
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.1%
probabilidad de explotación
0.1%top 96% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
seg6: Fix validation of nexthop addresses
The kernel currently validates that the length of the provided nexthop
address does not exceed the specified length. This can lead to the
kernel reading uninitialized memory if user space provided a shorter
length than the specified one.
Fix by validating that the provided length exactly matches the specified
one.
Productos afectados
Linux · LinuxReferencias
https://git.kernel.org/stable/c/668923c474608dd9ebce0fbcc41bd8a27aa73dd6https://git.kernel.org/stable/c/7632fedb266d93ed0ed9f487133e6c6314a9b2d1https://git.kernel.org/stable/c/cd4cd09810211fa23609c5c1018352e9e1cd8e5ahttps://git.kernel.org/stable/c/cef33a86bcb04ecf4dc10c56f6c42ee9d1c54bachttps://git.kernel.org/stable/c/d2507aeea45b3c5aa24d5daae0cf3db76895c0b7https://git.kernel.org/stable/c/d5d9fd13bc19a3f9f2a951c5b6e934d84205789ehttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html