CVE-2024-26805

netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter

References

Notes

 carnil> Introduced in 1853c9496460 ("netlink, mmap: transform mmap skb into full skb on
 carnil> taps"). Vulnerable versions: 3.12.49 3.14.54 3.16.35 3.18.23 4.1.10 4.2.3
 carnil> 4.3-rc3.

Bugs

Status

Branch Status
4.19-buster-security needed
4.19-upstream-stable released (4.19.309) [ec343a55b687a452f5e87f3b52bf9f155864df65]
5.10-bullseye-security released (5.10.216-1)
5.10-upstream-stable released (5.10.212) [f19d1f98e60e68b11fc60839105dd02a30ec0d77]
6.1-bookworm-security released (6.1.82-1)
6.1-upstream-stable released (6.1.81) [0b27bf4c494d61e5663baa34c3edd7ccebf0ea44]
6.6-upstream-stable released (6.6.21) [d3ada42e534a83b618bbc1e490d23bf0fdae4736]
6.8-upstream-stable N/A "Fixed before branching point"
sid released (6.7.9-1)
upstream released (6.8-rc7) [661779e1fcafe1b74b3f3fe8e980c1e207fea1fd]