CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's IP Virtual Server (IPVS) component, specifically in how it handles ICMP error messages from tunnels. If exploited, this flaw could lead to improper handling of inner IP headers, potentially compromising the integrity of packet processing and affecting network stability. System administrators and developers managing Linux-based environments should prioritize this issue to ensure robust network performance and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG(). Also, add more checks for the length of the inner headers.