batman-adv: frag: free unfragmentable packet
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: frag: free unfragmentable packet
The caller of batadv_frag_send_packet() assume that the skb provided to the
function are always consumed. But the pre-check for an empty payload or the
zero fragment size returned an error without any further actions.
A failed pre-check must use the same error handling code as the rest of the
function.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7ehttps://git.kernel.org/stable/c/08047838817561cef33ada9774a2a4663d499ecbhttps://git.kernel.org/stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9dhttps://git.kernel.org/stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32bhttps://git.kernel.org/stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76https://git.kernel.org/stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510https://git.kernel.org/stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75