CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN
In the Linux kernel, the following vulnerability has been resolved:
net: lapb: increase LAPBHEADERLEN
It is unclear if net/lapb code is supposed to be ready for 8021q.
We can at least avoid crashes like the following :
skbuff: skbunderpanic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:206 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:skbpanic net/core/skbuff.c:206 [inline] RIP: 0010:skbunderpanic+0x14b/0x150 net/core/skbuff.c:216 Code: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 RSP: 0018:ffffc90002ddf638 EFLAGS: 00010282 RAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600 RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 RBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60 R10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140 R13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016 FS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> skbpush+0xe5/0x100 net/core/skbuff.c:2636 nrheader+0x36/0x320 net/netrom/nrdev.c:69 devhardheader include/linux/netdevice.h:3148 [inline] vlandevhardheader+0x359/0x480 net/8021q/vlandev.c:83 devhardheader include/linux/netdevice.h:3148 [inline] lapbethdatatransmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257 lapbdatatransmit+0x91/0xb0 net/lapb/lapbiface.c:447 lapbtransmitbuffer+0x168/0x1f0 net/lapb/lapbout.c:149 lapbestablishdatalink+0x84/0xd0 lapbdeviceevent+0x4e0/0x670 notifiercallchain+0x19f/0x3e0 kernel/notifier.c:93 devnotifyflags+0x207/0x400 devchangeflags+0xf0/0x1a0 net/core/dev.c:8922 devinetioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188 inetioctl+0x3d7/0x4f0 net/ipv4/afinet.c:1003 sockdoioctl+0x158/0x460 net/socket.c:1227 sockioctl+0x626/0x8e0 net/socket.c:1346 vfsioctl fs/ioctl.c:51 [inline] dosysioctl fs/ioctl.c:907 [inline] sesysioctl+0xf9/0x170 fs/ioctl.c:893 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xf3/0x230 arch/x86/entry/common.c:83
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56659?
The severity of CVE-2024-56659 is classified as medium due to potential crash conditions.
How do I fix CVE-2024-56659?
To fix CVE-2024-56659, you should upgrade your Linux kernel to a version that includes the security patch.
Which Linux kernel versions are affected by CVE-2024-56659?
CVE-2024-56659 affects several Linux kernel versions ranging from 2.6.12 to 6.12.6, including specific versions like 5.4.288 and 6.13-rc2.
What specific components of the Linux kernel are impacted by CVE-2024-56659?
CVE-2024-56659 specifically impacts the LAPB code within the networking subsystem of the Linux kernel.
Is CVE-2024-56659 a local or remote vulnerability?
CVE-2024-56659 is primarily a local vulnerability that could lead to crashes in specific network configurations.