CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's netfilter component allows for out-of-bounds access due to insufficient validation of the `iph->ihl` field in the `nf_flow_ip4_tunnel_proto()` function, which could be exploited by attackers using malformed IP headers. This could lead to potential memory corruption or denial of service. Organizations using affected Linux distributions should prioritize this update to mitigate risks associated with this vulnerability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Add sanity check for iph->ihl field in nf_flow_ip4_tunnel_proto() before using it to compute the header size, avoiding out-of-bounds access with malformed IP headers. While at it, use iph->protocol instead of the hardcoded IPPROTO_IPIP constant when setting ctx->tun.proto and reference ctx->tun.hdr_size when updating ctx->offset.