Total vulnerabilities in the database
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 12.0 | 12.0.x |
| debian / debian_linux | 10.0 | 10.0.x |
| debian / debian_linux | 11.0 | 11.0.x |
| linux / linux_kernel | 4.20 | 5.4.244 |
| linux / linux_kernel | 4.15 | 4.19.284 |
| linux / linux_kernel | 6.2 | 6.3.4 |
| linux / linux_kernel | 5.16 | 6.1.30 |
| linux / linux_kernel | 5.11 | 5.15.113 |
| linux / linux_kernel | 5.5 | 5.10.181 |
| linux / linux_kernel | 3.19 | 4.14.316 |