REDHAT-BUG-2492363: High severity The Linux Kernel Organization Linux kernel vulnerability
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix possible UAF in icmpv6rcv()
Caching saddr and daddr before pskbpull() is problematic since skb->head can change.
Remove these temporary variables:
- We only access &ipv6hdr(skb)->saddr and &ipv6hdr(skb)->daddr when netdbgratelimited() is called in the slow path.
- Avoid potential future misuse after pskbpull() call.