CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel, specifically in the handling of UDP tunnel segmentation, where a use-after-free condition can occur if the socket buffer's head is reallocated before the UDP header is accessed. This flaw could lead to potential memory corruption and exploitation, impacting system stability and security. Organizations using Linux-based systems, particularly those relying on UDP tunneling, should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.