< Back

CVE-2024-26665

Updated on 02 Apr 2024

Severity

7.1 High severity

Details

CVSS score: 7.1
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE ID: CWE-125 Out-of-bounds Read
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

tunnels: fix out of bounds access when building IPv6 PMTU error

If the ICMPv6 error is built from a non-linear skb we get the following splat,

BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 … kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0

Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs.

Details

Affected product:: AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , TuxCare 9.6 ESU
Affected packages:: kernel @ 2.6.32 (+11 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 8	Released	42 kernels 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-477.27.2.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.18.2.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10
Amazon Linux 2023	Will Not Fix	—
Amazon Linux 2 5.10	Will Not Fix	—
CentOS 8	Released	13 kernels 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8 4.18.0-305.7.1.el8_4 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8
CloudLinux OS 7h	Released	53 kernels 4.18.0-305.10.2.2.lve.el7h 4.18.0-305.10.2.lve.el7h 4.18.0-305.12.1.lve.el7h 4.18.0-305.17.1.lve.el7h 4.18.0-305.19.1.lve.el7h 4.18.0-305.7.1.lve.el7h 4.18.0-305.lve.el7h 4.18.0-348.12.2.lve.1.el7h 4.18.0-348.12.2.lve.2.el7h 4.18.0-513.11.1.lve.1.el7h 4.18.0-513.11.1.lve.el7h 4.18.0-513.18.1.lve.1.el7h 4.18.0-513.18.1.lve.2.el7h 4.18.0-513.18.1.lve.el7h 4.18.0-513.24.1.lve.1.el7h 4.18.0-513.24.1.lve.2.el7h 4.18.0-513.24.1.lve.el7h 4.18.0-513.5.1.lve.el7h 4.18.0-348.12.2.lve.el7h 4.18.0-348.20.1.lve.1.el7h 4.18.0-348.20.1.lve.el7h 4.18.0-348.23.1.lve.el7h 4.18.0-348.7.1.lve.el7h 4.18.0-348.lve.el7h 4.18.0-372.13.1.lve.el7h 4.18.0-372.16.1.lve.el7h 4.18.0-372.19.1.lve.el7h 4.18.0-372.26.1.lve.1.el7h 4.18.0-372.32.1.lve.el7h 4.18.0-372.9.1.lve.el7h 4.18.0-425.10.1.lve.el7h 4.18.0-425.13.1.lve.el7h 4.18.0-425.19.2.lve.el7h 4.18.0-425.3.1.lve.1.el7h 4.18.0-425.3.1.lve.2.el7h 4.18.0-425.3.1.lve.3.el7h 4.18.0-425.3.1.lve.el7h 4.18.0-477.10.1.lve.1.el7h 4.18.0-477.13.1.lve.1.el7h 4.18.0-477.13.1.lve.el7h 4.18.0-477.15.1.lve.1.el7h 4.18.0-477.15.1.lve.2.el7h 4.18.0-477.21.1.lve.1.el7h 4.18.0-477.21.1.lve.el7h 4.18.0-477.27.1.lve.el7h 4.18.0-477.27.2.lve.el7h 4.18.0-513.9.1.lve.el7h 4.18.0-553.16.1.lve.1.el7h 4.18.0-553.16.1.lve.el7h 4.18.0-553.5.1.lve.1.el7h 4.18.0-553.5.1.lve.el7h 4.18.0-553.8.1.lve.el7h 4.18.0-553.lve.el7h
CloudLinux OS 8	Released	51 kernels 4.18.0-553.5.1.lve.el8 4.18.0-553.8.1.lve.el8 4.18.0-553.lve.el8 4.18.0-305.12.1.lve.el8 4.18.0-305.17.1.lve.el8 4.18.0-305.19.1.lve.el8 4.18.0-305.7.1.lve.el8 4.18.0-305.lve.el8 4.18.0-348.12.2.lve.el8 4.18.0-348.20.1.lve.1.el8 4.18.0-348.20.1.lve.el8 4.18.0-348.23.1.lve.el8 4.18.0-348.7.1.lve.el8 4.18.0-348.lve.el8 4.18.0-372.13.1.lve.el8 4.18.0-372.16.1.lve.el8 4.18.0-372.19.1.lve.el8 4.18.0-372.26.1.lve.1.el8 4.18.0-372.32.1.lve.el8 4.18.0-372.9.1.1.lve.el8 4.18.0-372.9.1.lve.el8 4.18.0-425.10.1.lve.el8 4.18.0-425.13.1.lve.el8 4.18.0-425.19.2.lve.el8 4.18.0-425.3.1.lve.1.el8 4.18.0-425.3.1.lve.2.el8 4.18.0-425.3.1.lve.3.el8 4.18.0-425.3.1.lve.el8 4.18.0-477.10.1.lve.el8 4.18.0-477.13.1.lve.1.el8 4.18.0-477.13.1.lve.el8 4.18.0-477.15.1.lve.2.el8 4.18.0-477.21.1.lve.1.el8 4.18.0-477.21.1.lve.el8 4.18.0-477.27.1.lve.el8 4.18.0-477.27.2.lve.el8 4.18.0-513.11.1.lve.el8 4.18.0-513.18.1.lve.1.el8 4.18.0-513.18.1.lve.2.el8 4.18.0-513.18.1.lve.el8 4.18.0-513.24.1.lve.1.el8 4.18.0-513.24.1.lve.2.el8 4.18.0-305.10.2.2.lve.el8 4.18.0-305.10.2.lve.el8 4.18.0-513.24.1.lve.el8 4.18.0-513.5.1.lve.el8 4.18.0-513.9.1.lve.el8 4.18.0-544.lve.el8 4.18.0-553.16.1.lve.1.el8 4.18.0-553.16.1.lve.el8 4.18.0-553.5.1.lve.1.el8
Debian 11	Released	28 kernels 5.10.46-5 5.10.70-1 5.10.46-4 5.10.84-1 5.10.92-1 5.10.92-2 5.10.103-1 5.10.106-1 5.10.113-1 5.10.120-1 5.10.127-1 5.10.127-2 5.10.136-1 5.10.140-1 5.10.149-1 5.10.149-2 5.10.158-2 5.10.162-1 5.10.179-1 5.10.179-2 5.10.179-3 5.10.179-5 5.10.191-1 5.10.197-1 5.10.178-3 5.10.205-2 5.10.205-1 5.10.209-2
Debian 11 cloud	Released	8 kernels 5.10.113-1 5.10.179-2 5.10.179-3 5.10.179-5 5.10.191-1 5.10.197-1 5.10.205-2 5.10.209-2
Debian 12	Planned	—
Oracle Linux 8	Released	46 kernels 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.0.1.el8_6 4.18.0-372.16.1.0.1.el8_6 4.18.0-372.19.1.0.1.el8_6 4.18.0-372.26.1.0.1.el8_6 4.18.0-372.32.1.0.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.0.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.0.1.el8_9 4.18.0-513.18.0.1.el8_9 4.18.0-513.18.0.2.el8_9 4.18.0-513.18.1.0.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10
Proxmox VE 7 5.15	Released	43 kernels 5.15.104-1-pve-5.15.104-2 5.15.107-1-pve-5.15.107-1 5.15.107-2-pve-5.15.107-2 5.15.108-1-pve-5.15.108-1 5.15.108-1-pve-5.15.108-2 5.15.116-1-pve-5.15.116-1 5.15.12-1-pve-5.15.12-2 5.15.12-1-pve-5.15.12-3 5.15.126-1-pve-5.15.126-1 5.15.131-1-pve-5.15.131-1 5.15.131-1-pve-5.15.131-2 5.15.131-2-pve-5.15.131-3 5.15.136-1-pve-5.15.136-1 5.15.17-1-pve-5.15.17-1 5.15.19-1-pve-5.15.19-1 5.15.19-2-pve-5.15.19-2 5.15.19-2-pve-5.15.19-3 5.15.27-1-pve-5.15.27-1 5.15.30-1-pve-5.15.30-1 5.15.30-2-pve-5.15.30-3 5.15.35-1-pve-5.15.35-1 5.15.35-1-pve-5.15.35-2 5.15.35-1-pve-5.15.35-3 5.15.35-2-pve-5.15.35-4 5.15.35-2-pve-5.15.35-5 5.15.35-3-pve-5.15.35-6 5.15.39-1-pve-5.15.39-1 5.15.39-2-pve-5.15.39-2 5.15.39-3-pve-5.15.39-3 5.15.39-4-pve-5.15.39-4 5.15.5-1-pve-5.15.5-1 5.15.53-1-pve-5.15.53-1 5.15.60-1-pve-5.15.60-1 5.15.60-2-pve-5.15.60-2 5.15.64-1-pve-5.15.64-1 5.15.7-1-pve-5.15.7-1 5.15.74-1-pve-5.15.74-1 5.15.83-1-pve-5.15.83-1 5.15.85-1-pve-5.15.85-1 5.15.102-1-pve-5.15.102-1 5.15.104-1-pve-5.15.104-1 5.15.111-1-pve-5.15.111-1 5.15.143-1-pve-5.15.143-1
RHEL 8	Released	42 kernels 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10
Rocky Linux 8	Released	38 kernels 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6.0.1 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9.0.1 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10
Ubuntu 20.04 HWE AWS	Released	37 kernels 5.15.0-1014.18~20.04.1 5.15.0-1015.19~20.04.1 5.15.0-1017.21~20.04.1 5.15.0-1018.22~20.04.1 5.15.0-1019.23~20.04.1 5.15.0-1020.24~20.04.1 5.15.0-1021.25~20.04.1 5.15.0-1022.26~20.04.1 5.15.0-1023.27~20.04.1 5.15.0-1026.30~20.04.2 5.15.0-1027.31~20.04.1 5.15.0-1028.32~20.04.1 5.15.0-1030.34~20.04.1 5.15.0-1031.35~20.04.1 5.15.0-1033.37~20.04.1 5.15.0-1034.38~20.04.1 5.15.0-1035.39~20.04.1 5.15.0-1036.40~20.04.1 5.15.0-1037.41~20.04.1 5.15.0-1038.43~20.04.1 5.15.0-1039.44~20.04.1 5.15.0-1040.45~20.04.1 5.15.0-1041.46~20.04.1 5.15.0-1043.48~20.04.1 5.15.0-1044.49~20.04.1 5.15.0-1045.50~20.04.1 5.15.0-1047.52~20.04.1 5.15.0-1048.53~20.04.1 5.15.0-1049.54~20.04.1 5.15.0-1050.55~20.04.1 5.15.0-1051.56~20.04.1 5.15.0-1052.57~20.04.1 5.15.0-1053.58~20.04.1 5.15.0-1055.60~20.04.1 5.15.0-1056.61~20.04.1 5.15.0-1057.63~20.04.1 5.15.0-1058.64~20.04.1
Ubuntu 20.04 HWE Azure	Released	21 kernels 5.15.0-1008.9~20.04.1 5.15.0-1013.16~20.04.1 5.15.0-1014.17~20.04.1 5.15.0-1017.20~20.04.1 5.15.0-1019.24~20.04.1 5.15.0-1020.25~20.04.1 5.15.0-1021.26~20.04.1 5.15.0-1022.27~20.04.1 5.15.0-1023.29~20.04.1 5.15.0-1024.30~20.04.1 5.15.0-1029.36~20.04.1 5.15.0-1034.41~20.04.1 5.15.0-1049.56~20.04.1 5.15.0-1050.57~20.04.1 5.15.0-1054.62~20.04.1 5.15.0-1056.64~20.04.1 5.15.0-1057.65~20.04.1 5.15.0-1058.66~20.04.2 5.15.0-1059.67~20.04.1 5.15.0-1060.69~20.04.1 5.15.0-1061.70~20.04.1
Ubuntu 22.04	Released	50 kernels 5.15.0-76.83 5.15.0-78.85 5.15.0-79.86 5.15.0-82.91 5.15.0-83.92 5.15.0-84.93 5.15.0-86.96 5.15.0-87.97 5.15.0-88.98 5.15.0-89.99 5.15.0-91.101 5.15.0-92.102 5.15.0-94.104 5.15.0-97.107 5.15.0-100.110 5.15.0-101.111 5.15.0-102.112 5.15.0-105.115 5.15.0-25.25 5.15.0-27.28 5.15.0-28.29 5.15.0-29.30 5.15.0-30.31 5.15.0-33.34 5.15.0-35.36 5.15.0-37.39 5.15.0-39.42 5.15.0-40.43 5.15.0-41.44 5.15.0-43.46 5.15.0-46.49 5.15.0-47.51 5.15.0-48.54 5.15.0-50.56 5.15.0-52.58 5.15.0-53.59 5.15.0-54.60 5.15.0-56.62 5.15.0-57.63 5.15.0-58.64 5.15.0-60.66 5.15.0-67.74 5.15.0-68.75 5.15.0-69.76 5.15.0-70.77 5.15.0-71.78 5.15.0-72.79 5.15.0-73.80 5.15.0-74.81 5.15.0-75.82
Ubuntu 22.04 AWS	Released	44 kernels 5.15.0-1004.6 5.15.0-1005.7 5.15.0-1008.10 5.15.0-1009.11 5.15.0-1011.14 5.15.0-1013.17 5.15.0-1014.18 5.15.0-1015.19 5.15.0-1017.21 5.15.0-1018.22 5.15.0-1020.24 5.15.0-1021.25 5.15.0-1022.26 5.15.0-1023.27 5.15.0-1024.29 5.15.0-1026.30 5.15.0-1027.31 5.15.0-1028.32 5.15.0-1030.34 5.15.0-1031.35 5.15.0-1032.36 5.15.0-1033.37 5.15.0-1034.38 5.15.0-1035.39 5.15.0-1036.40 5.15.0-1037.41 5.15.0-1038.43 5.15.0-1039.44 5.15.0-1040.45 5.15.0-1042.47 5.15.0-1043.48 5.15.0-1044.49 5.15.0-1045.50 5.15.0-1047.52 5.15.0-1048.53 5.15.0-1049.54 5.15.0-1050.55 5.15.0-1051.56 5.15.0-1052.57 5.15.0-1053.58 5.15.0-1055.60 5.15.0-1056.61 5.15.0-1057.63 5.15.0-1060.66
Ubuntu 22.04 Azure	Released	41 kernels 5.15.0-1003.4 5.15.0-1005.6 5.15.0-1007.8 5.15.0-1008.9 5.15.0-1010.12 5.15.0-1012.15 5.15.0-1013.16 5.15.0-1014.17 5.15.0-1017.20 5.15.0-1019.24 5.15.0-1020.25 5.15.0-1021.26 5.15.0-1022.27 5.15.0-1023.29 5.15.0-1024.30 5.15.0-1029.36 5.15.0-1034.41 5.15.0-1035.42 5.15.0-1036.43 5.15.0-1037.44 5.15.0-1038.45 5.15.0-1039.46 5.15.0-1040.47 5.15.0-1041.48 5.15.0-1042.49 5.15.0-1044.51 5.15.0-1045.52 5.15.0-1046.53 5.15.0-1047.54 5.15.0-1049.56 5.15.0-1050.57 5.15.0-1051.59 5.15.0-1052.60 5.15.0-1053.61 5.15.0-1054.62 5.15.0-1056.64 5.15.0-1057.65 5.15.0-1058.66 5.15.0-1059.67 5.15.0-1060.69 5.15.0-1061.70

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2024-26665

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!