7.5

CVE-2026-68287

drop_monitor: fix size calculations for 64-bit attributes

In the Linux kernel, the following vulnerability has been resolved:

drop_monitor: fix size calculations for 64-bit attributes

net_dm_packet_report_fill() and net_dm_hw_packet_report_fill() use
nla_put_u64_64bit() to append 64-bit attributes (NET_DM_ATTR_PC and
NET_DM_ATTR_TIMESTAMP).

On 32-bit architectures without CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS,
nla_put_u64_64bit() may append a 4-byte NET_DM_ATTR_PAD attribute for
64-bit alignment.

However, net_dm_packet_report_size() and net_dm_hw_packet_report_size()
used nla_total_size(sizeof(u64)) instead of nla_total_size_64bit(sizeof(u64)),
budgeting 12 bytes instead of up to 16 bytes.

This under-estimation of SKB size can lead to an skb_over_panic() when
__nla_reserve() or skb_put() is subsequently called.

Fix this by using nla_total_size_64bit(sizeof(u64)) in both size calculations.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ca30707dee2bc8bc81cfd8b4277fe90f7ca6df1f
Version < 1275a4769c126405c6c63b6372daff120ac679a6
Status affected
Version ca30707dee2bc8bc81cfd8b4277fe90f7ca6df1f
Version < 0da8f531336b28a59b23e5a67d40eaed15906201
Status affected
Version ca30707dee2bc8bc81cfd8b4277fe90f7ca6df1f
Version < 6048ed2dfb33426c8aef32f8d225ea91c66813db
Status affected
Version ca30707dee2bc8bc81cfd8b4277fe90f7ca6df1f
Version < 925669d4cfd47a9019ab29b40676215bab5dae35
Status affected
Version ca30707dee2bc8bc81cfd8b4277fe90f7ca6df1f
Version < 4a9e30764e80693bcf875c776170edce20f94fe0
Status affected
Version ca30707dee2bc8bc81cfd8b4277fe90f7ca6df1f
Version < 7089f7ab99c89f443c92d8fcc585e63f2727f0b3
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.4
Status affected
Version 0
Version < 5.4
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.397
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/4a9e30764e80693bcf875c776170edce20f94fe0
https://git.kernel.org/stable/c/7089f7ab99c89f443c92d8fcc585e63f2727f0b3
https://git.kernel.org/stable/c/6048ed2dfb33426c8aef32f8d225ea91c66813db
https://git.kernel.org/stable/c/925669d4cfd47a9019ab29b40676215bab5dae35
https://git.kernel.org/stable/c/0da8f531336b28a59b23e5a67d40eaed15906201
https://git.kernel.org/stable/c/1275a4769c126405c6c63b6372daff120ac679a6