CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's netfilter subsystem, specifically within the SIP connection tracking helper, which improperly accesses routing information without validating its availability. This flaw could lead to unexpected behavior in network traffic handling, particularly for systems using the SIP external media feature, which is disabled by default. Network administrators and security teams managing Linux-based environments should prioritize this issue to ensure proper traffic management and mitigate potential disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relies on the skb_dst() to be present if sip_external_media is set to 1 (which is disabled by default as a module parameter). This effectively disables the sip_external_media toggle for these subsystems without resulting in a crash.