Към съдържанието
Търсене

CVE-2025-37959: Linux

9.4

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used to redirect packets to a device in another network namespace, the skb isn't scrubbed. That can lead skb information from one namespace to be "misused" in another namespace. As one example, this is causing Cilium to drop traffic when using bpf_redirect_peer to redirect packets that just went through IPsec decryption to a container namespace. The following pwru trace shows (1) the packet path from the host's XFRM layer to the container's XFRM layer where it's dropped and (2) the number of active skb extensions at each function. NETNS MARK IFACE TUPLE FUNC 4026533547 d00 eth0 10.244.3.124:35473->10.244.2.158:53 xfrm_rcv_cb .active_extensions = (__u8)2, 4026533547 d00 eth0 10.244.3.124:35473->10.244.2.158:53 xfrm4_rcv_cb .active_extensions = (__u8)2, 4026533547 d00 eth0 10.244.3.124:35473->10.244.2.158:53 gro_cells_receive .active_extensions = (__u8)2, [...] 4026533547 0 eth0 10.244.3.124:35473->10.244.2.158:53 skb_do_redirect .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 ip_rcv .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 ip_rcv_core .active_extensions = (__u8)2, [...] 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 udp_queue_rcv_one_skb .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 __xfrm_policy_check .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 __xfrm_decode_session

Засегнати продукти

  • Linux Linux: 9aa1206e8f48222f35a0c809f33b2f4aaa1e2661 преди de1067cc8cf0e8c11ae20cbe5c467aef19d04ded; 9aa1206e8f48222f35a0c809f33b2f4aaa1e2661 преди 355b0526336c0bf2bf7feaca033568ede524f763; 9aa1206e8f48222f35a0c809f33b2f4aaa1e2661 преди b37e54259cab4f78b53953d6f6268b85f07bef3e; 9aa1206e8f48222f35a0c809f33b2f4aaa1e2661 преди 9e15ef33ba39fb6d9d1f51445957f16983a9437a; 9aa1206e8f48222f35a0c809f33b2f4aaa1e2661 преди c4327229948879814229b46aa26a750718888503
  • Linux Linux: 5.10; преди 5.10; 6.1.139 до 6.1.*; 6.6.91 до 6.6.*; 6.12.29 до 6.12.*; 6.14.7 до 6.14.*; от 6.15 нататък
  • Siemens: още 3 продукта, добавени от Siemens

    SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

История

  • 20 май 2025 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2025-37959: Linux | freedomonline.bg