CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's xfrm module, specifically in the xfrm_selector_match() function, which can lead to a shift-out-of-bounds error when an AF_UNSPEC selector with an excessively large prefix length is matched against an IPv4 flow. This flaw could potentially allow attackers to exploit the kernel's handling of network traffic, leading to instability or unauthorized access. Organizations using Linux systems, particularly those relying on advanced networking features, should prioritize addressing this issue to mitigate potential security risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrm_selector_match() due to AF_UNSPEC selector with large prefixlen (e.g. 128) matched against IPv4 flow (when XFRM_STATE_AF_UNSPEC is set). Fix this by: - Rejecting mismatched families in xfrm_selector_match. - Returning false in addr4_match if prefixlen > 32. - Returning false in addr_match if prefixlen > 128 (prevents overflow).