Aller au contenu
Se connecter
8.8 Élevée

CVE-2025-39839 In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding…

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet() trusts coded_len and checks only against skb->len. XOR starts at sizeof(struct batadv_unicast_packet), reducing payload headroom, and the source skb length is not verified, allowing an out-of-bounds read and a small out-of-bounds write. Validate that coded_len fits within the payload area of both destination and source sk_buffs before XORing.

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.17 premières → < 6.17 6.17
Linux 6.16 premières → < 6.16.6 6.16.6
Linux 6.12 premières → < 6.12.46 6.12.46
Linux 6.6 premières → < 6.6.105 6.6.105
Linux 6.1 premières → < 6.1.151 6.1.151
Linux 5.15 premières → < 5.15.192 5.15.192
Linux 5.10 premières → < 5.10.243 5.10.243
Linux 5.4 premières → < 5.4.299 5.4.299
Linux 3.10 Pas de correctif indiqué
Afficher les 17 autres branches
Produit Versions touchées Corrigé en
RUGGEDCOM RST2428P 3.3 premières → < 3.3 3.3
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.3 premières → < 3.3 3.3
SCALANCE XCH328 3.3 premières → < 3.3 3.3
SCALANCE XCM324 3.3 premières → < 3.3 3.3
SCALANCE XCM328 3.3 premières → < 3.3 3.3
SCALANCE XCM332 3.3 premières → < 3.3 3.3
SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (230 V AC, 12xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (230 V AC, 8xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 12xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 8xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 12xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 8xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 premières → < 3.3 3.3
SIMATIC CN 4100 5.0 premières → < 5.0 5.0

Autres CVE de Linux

Les 18300 CVE de Linux →
CVE-2026-99284 net: skbuff: propagate shared-frag marker in skb_zerocopy() Non notée CVE-2026-99283 netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Non notée CVE-2026-99282 net/sched: sch_teql: fix use-after-free on lower qdisc drop Non notée CVE-2026-99281 tun: Require CAP_NET_ADMIN to attach to an ownerless device Non notée
Suivre cette CVE