GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-43817 (GCVE-0-2024-43817)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:21 – Updated: 2026-05-23 15:52
VLAI
Title
net: missing check virtio
Summary
In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again 1. After the skb_segment function the buffer may become non-linear (nr_frags != 0), but since the SKBTX_SHARED_FRAG flag is not set anywhere the __skb_linearize function will not be executed, then the buffer will remain non-linear. Then the condition (offset >= skb_headlen(skb)) becomes true, which causes WARN_ON_ONCE in skb_checksum_help. 2. The struct sk_buff and struct virtio_net_hdr members must be mathematically related. (gso_size) must be greater than (needed) otherwise WARN_ON_ONCE. (remainder) must be greater than (needed) otherwise WARN_ON_ONCE. (remainder) may be 0 if division is without remainder. offset+2 (4191) > skb_headlen() (1116) WARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303 Modules linked in: CPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0 Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303 Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 <0f> 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef RSP: 0018:ffffc90003a9f338 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209 RDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001 RBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c R13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d FS: 0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ip_do_fragment+0xa1b/0x18b0 net/ipv4/ip_output.c:777 ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584 ip_finish_output_gso net/ipv4/ip_output.c:286 [inline] __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295 ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:433 dst_output include/net/dst.h:451 [inline] ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129 iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82 ipip6_tunnel_xmit net/ipv6/sit.c:1034 [inline] sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3545 [inline] dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561 __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x257/0x380 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xd5/0x180 net/socket.c:745 __sys_sendto+0x255/0x340 net/socket.c:2190 __do_sys_sendto net/socket.c:2202 [inline] __se_sys_sendto net/socket.c:2198 [inline] __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b Found by Linux Verification Center (linuxtesting.org) with Syzkaller
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:09 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0f6925b3e8da0dbbb52447ca8a8b42b371aac7db , < 27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f (git)
Affected: 0f6925b3e8da0dbbb52447ca8a8b42b371aac7db , < 5b1997487a3f3373b0f580c8a20b56c1b64b0775 (git)
Affected: 0f6925b3e8da0dbbb52447ca8a8b42b371aac7db , < 90d41ebe0cd4635f6410471efc1dd71b33e894cf (git)
Affected: 0f6925b3e8da0dbbb52447ca8a8b42b371aac7db , < e9164903b8b303c34723177b02fe91e49e3c4cd7 (git)
Affected: 0f6925b3e8da0dbbb52447ca8a8b42b371aac7db , < e269d79c7d35aa3808b1f3c1737d63dab504ddc8 (git)
Affected: 2789bc090f4a2caef0cceb3f108867de608bb23a (git)
Affected: 16851e34b621bc7e652c508bb28c47948fb86958 (git)
Affected: a05fb4ac72fb2ddbdcb135c87b0087ac59fa4de4 (git)
Affected: a36703d08c83b1488a2f2922f0dc4263125ccd2d (git)
Affected: 4.14.242 , < 4.15 (semver)
Affected: 4.19.201 , < 4.20 (semver)
Affected: 5.4.121 , < 5.5 (semver)
Affected: 5.10.39 , < 5.11 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.12
Unaffected: 0 , < 5.12 (semver)
Unaffected: 5.15.165 , ≤ 5.15.* (semver)
Unaffected: 6.1.103 , ≤ 6.1.* (semver)
Unaffected: 6.6.44 , ≤ 6.6.* (semver)
Unaffected: 6.10.3 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-43817",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:09:12.881524Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:25.439Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:05:03.390Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/linux/virtio_net.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f",
              "status": "affected",
              "version": "0f6925b3e8da0dbbb52447ca8a8b42b371aac7db",
              "versionType": "git"
            },
            {
              "lessThan": "5b1997487a3f3373b0f580c8a20b56c1b64b0775",
              "status": "affected",
              "version": "0f6925b3e8da0dbbb52447ca8a8b42b371aac7db",
              "versionType": "git"
            },
            {
              "lessThan": "90d41ebe0cd4635f6410471efc1dd71b33e894cf",
              "status": "affected",
              "version": "0f6925b3e8da0dbbb52447ca8a8b42b371aac7db",
              "versionType": "git"
            },
            {
              "lessThan": "e9164903b8b303c34723177b02fe91e49e3c4cd7",
              "status": "affected",
              "version": "0f6925b3e8da0dbbb52447ca8a8b42b371aac7db",
              "versionType": "git"
            },
            {
              "lessThan": "e269d79c7d35aa3808b1f3c1737d63dab504ddc8",
              "status": "affected",
              "version": "0f6925b3e8da0dbbb52447ca8a8b42b371aac7db",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "2789bc090f4a2caef0cceb3f108867de608bb23a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "16851e34b621bc7e652c508bb28c47948fb86958",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a05fb4ac72fb2ddbdcb135c87b0087ac59fa4de4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a36703d08c83b1488a2f2922f0dc4263125ccd2d",
              "versionType": "git"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.242",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.201",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.121",
              "versionType": "semver"
            },
            {
              "lessThan": "5.11",
              "status": "affected",
              "version": "5.10.39",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/linux/virtio_net.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.242",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.201",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.121",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.10.39",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: missing check virtio\n\nTwo missing check in virtio_net_hdr_to_skb() allowed syzbot\nto crash kernels again\n\n1. After the skb_segment function the buffer may become non-linear\n(nr_frags != 0), but since the SKBTX_SHARED_FRAG flag is not set anywhere\nthe __skb_linearize function will not be executed, then the buffer will\nremain non-linear. Then the condition (offset \u003e= skb_headlen(skb))\nbecomes true, which causes WARN_ON_ONCE in skb_checksum_help.\n\n2. The struct sk_buff and struct virtio_net_hdr members must be\nmathematically related.\n(gso_size) must be greater than (needed) otherwise WARN_ON_ONCE.\n(remainder) must be greater than (needed) otherwise WARN_ON_ONCE.\n(remainder) may be 0 if division is without remainder.\n\noffset+2 (4191) \u003e skb_headlen() (1116)\nWARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\nModules linked in:\nCPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0\nHardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023\nRIP: 0010:skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\nCode: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 \u003c0f\u003e 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef\nRSP: 0018:ffffc90003a9f338 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209\nRDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001\nRBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c\nR13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d\nFS:  0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n ip_do_fragment+0xa1b/0x18b0 net/ipv4/ip_output.c:777\n ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584\n ip_finish_output_gso net/ipv4/ip_output.c:286 [inline]\n __ip_finish_output net/ipv4/ip_output.c:308 [inline]\n __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295\n ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323\n NF_HOOK_COND include/linux/netfilter.h:303 [inline]\n ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:433\n dst_output include/net/dst.h:451 [inline]\n ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129\n iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82\n ipip6_tunnel_xmit net/ipv6/sit.c:1034 [inline]\n sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3545 [inline]\n dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561\n __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n packet_xmit+0x257/0x380 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3087 [inline]\n packet_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0xd5/0x180 net/socket.c:745\n __sys_sendto+0x255/0x340 net/socket.c:2190\n __do_sys_sendto net/socket.c:2202 [inline]\n __se_sys_sendto net/socket.c:2198 [inline]\n __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:52:55.878Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f"
        },
        {
          "url": "https://git.kernel.org/stable/c/5b1997487a3f3373b0f580c8a20b56c1b64b0775"
        },
        {
          "url": "https://git.kernel.org/stable/c/90d41ebe0cd4635f6410471efc1dd71b33e894cf"
        },
        {
          "url": "https://git.kernel.org/stable/c/e9164903b8b303c34723177b02fe91e49e3c4cd7"
        },
        {
          "url": "https://git.kernel.org/stable/c/e269d79c7d35aa3808b1f3c1737d63dab504ddc8"
        }
      ],
      "title": "net: missing check virtio",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-43817",
    "datePublished": "2024-08-17T09:21:39.636Z",
    "dateReserved": "2024-08-17T09:11:59.270Z",
    "dateUpdated": "2026-05-23T15:52:55.878Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-43817",
      "date": "2026-09-15",
      "epss": "0.00239",
      "percentile": "0.15014"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.12\", \"versionEndExcluding\": \"5.15.165\", \"matchCriteriaId\": \"1666B32A-662E-4BCD-AD39-98FBEB2BEBEC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.103\", \"matchCriteriaId\": \"E45EAC72-8329-4F99-8276-86AF9BB3496A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.44\", \"matchCriteriaId\": \"CC912330-6B41-4C6B-99AF-F3857FBACB6A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.10.3\", \"matchCriteriaId\": \"92D388F2-1EAF-4CFA-AC06-5B26D762EA7D\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: missing check virtio\\n\\nTwo missing check in virtio_net_hdr_to_skb() allowed syzbot\\nto crash kernels again\\n\\n1. After the skb_segment function the buffer may become non-linear\\n(nr_frags != 0), but since the SKBTX_SHARED_FRAG flag is not set anywhere\\nthe __skb_linearize function will not be executed, then the buffer will\\nremain non-linear. Then the condition (offset \u003e= skb_headlen(skb))\\nbecomes true, which causes WARN_ON_ONCE in skb_checksum_help.\\n\\n2. The struct sk_buff and struct virtio_net_hdr members must be\\nmathematically related.\\n(gso_size) must be greater than (needed) otherwise WARN_ON_ONCE.\\n(remainder) must be greater than (needed) otherwise WARN_ON_ONCE.\\n(remainder) may be 0 if division is without remainder.\\n\\noffset+2 (4191) \u003e skb_headlen() (1116)\\nWARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\\nModules linked in:\\nCPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0\\nHardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023\\nRIP: 0010:skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\\nCode: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 \u003c0f\u003e 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef\\nRSP: 0018:ffffc90003a9f338 EFLAGS: 00010286\\nRAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209\\nRDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001\\nRBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000\\nR10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c\\nR13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d\\nFS:  0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\nCR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0\\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\\nCall Trace:\\n \u003cTASK\u003e\\n ip_do_fragment+0xa1b/0x18b0 net/ipv4/ip_output.c:777\\n ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584\\n ip_finish_output_gso net/ipv4/ip_output.c:286 [inline]\\n __ip_finish_output net/ipv4/ip_output.c:308 [inline]\\n __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295\\n ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323\\n NF_HOOK_COND include/linux/netfilter.h:303 [inline]\\n ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:433\\n dst_output include/net/dst.h:451 [inline]\\n ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129\\n iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82\\n ipip6_tunnel_xmit net/ipv6/sit.c:1034 [inline]\\n sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076\\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\\n xmit_one net/core/dev.c:3545 [inline]\\n dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561\\n __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346\\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\\n packet_xmit+0x257/0x380 net/packet/af_packet.c:276\\n packet_snd net/packet/af_packet.c:3087 [inline]\\n packet_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0xd5/0x180 net/socket.c:745\\n __sys_sendto+0x255/0x340 net/socket.c:2190\\n __do_sys_sendto net/socket.c:2202 [inline]\\n __se_sys_sendto net/socket.c:2198 [inline]\\n __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198\\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82\\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\\n\\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: net: falta de verificaci\\u00f3n virtio Dos comprobaciones faltantes en virtio_net_hdr_to_skb() permitieron a syzbot bloquear los kernels nuevamente 1. Despu\\u00e9s de la funci\\u00f3n skb_segment, el b\\u00fafer puede volverse no lineal (nr_frags! = 0), pero como el indicador SKBTX_SHARED_FRAG no est\\u00e1 configurado en ning\\u00fan lugar, la funci\\u00f3n __skb_linearize no se ejecutar\\u00e1, entonces el b\\u00fafer permanecer\\u00e1 no lineal. Entonces la condici\\u00f3n (offset \u0026gt;= skb_headlen(skb)) se vuelve verdadera, lo que provoca WARN_ON_ONCE en skb_checksum_help. 2. Los miembros de struct sk_buff y struct virtio_net_hdr deben estar relacionados matem\\u00e1ticamente. (gso_size) debe ser mayor que (necesario); de lo contrario, WARN_ON_ONCE. (resto) debe ser mayor que (necesario); de lo contrario, WARN_ON_ONCE. (resto) puede ser 0 si la divisi\\u00f3n no tiene resto. offset+2 (4191) \u0026gt; skb_headlen() (1116) ADVERTENCIA: CPU: 1 PID: 5084 en net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303 M\\u00f3dulos vinculados en: CPU : 1 PID: 5084 Comm: syz-executor336 No contaminado 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0 Nombre del hardware: Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2023 RIP: 0010:skb_checksum_help+0x5e2 /0x740 net/core/dev.c:3303 C\\u00f3digo: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 \u0026lt;0f\u0026gt; 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef RSP: 0018:ffffc90003a9f338 EFLAGS: 00010286 RAX: RBX: ffff888025125780 RCX: ffffffff814db209 RDX: ffff888015393b80 RSI : ffffffff814db216 RDI: 0000000000000001 RBP: ffff8880251257f4 R08: 0000000000000001 R09: 00000000000000000 R10: 0000000000000000 R11: 000000000001 R12: 000000000000045c R13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d FS: 0000555555c24380(0000) 8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 00000 00000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Seguimiento de llamadas:  ip_do_fragment+0xa1b/0x18b0 net/ipv4 /ip_output.c:777 ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584 ip_finish_output_gso net/ipv4/ip_output.c:286 [en l\\u00ednea] __ip_finish_output net/ipv4/ip_output.c:308 [en l\\u00ednea] __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295 ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323 NF_HOOK_COND include/linux/netfilter.h:303 [en l\\u00ednea] ip_output+0x13b/0x2a0 net/ipv4/ ip_output.c:433 dst_output include/net/dst.h:451 [en l\\u00ednea] ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129 iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82 ipip6_tunnel_xmit net/ipv6 /sit.c:1034 [en l\\u00ednea] sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076 __netdev_start_xmit include/linux/netdevice.h:4940 [en l\\u00ednea] netdev_start_xmit include/linux/netdevice.h:4954 [en l\\u00ednea] xmit_one net/core/dev.c:3545 [en l\\u00ednea] dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561 __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [en l\\u00ednea] paquete_xmit+0x257/0x380 net/packet/af_packet.c:276 paquete_snd net/packet/af_packet.c:3087 [en l\\u00ednea] paquete_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c :730 [en l\\u00ednea] __sock_sendmsg+0xd5/0x180 net/socket.c:745 __sys_sendto+0x255/0x340 net/socket.c:2190 __do_sys_sendto net/socket.c:2202 [en l\\u00ednea] __se_sys_sendto net/socket.c:2198 [en l\\u00ednea ] __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198 do_syscall_x64 arch/x86/entry/common.c:51 [en l\\u00ednea] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0x63/ 0x6b encontrado por el Centro de verificaci\\u00f3n de Linux (linuxtesting.org) con Syzkaller\"}]",
      "id": "CVE-2024-43817",
      "lastModified": "2024-09-03T17:41:46.407",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-08-17T10:15:08.010",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/5b1997487a3f3373b0f580c8a20b56c1b64b0775\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/90d41ebe0cd4635f6410471efc1dd71b33e894cf\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e269d79c7d35aa3808b1f3c1737d63dab504ddc8\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e9164903b8b303c34723177b02fe91e49e3c4cd7\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-21T00:55:24.000Z",
      "cve": "CVE-2024-43817",
      "id": "msrc_CVE-2024-43817",
      "initial_release_date": "2024-08-02T00:00:00.000Z",
      "product_status:fixed": "3",
      "product_status:known_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "net: missing check virtio",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-43817.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-43817\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-08-17T10:15:08.010\",\"lastModified\":\"2026-06-17T07:51:46.243\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: missing check virtio\\n\\nTwo missing check in virtio_net_hdr_to_skb() allowed syzbot\\nto crash kernels again\\n\\n1. After the skb_segment function the buffer may become non-linear\\n(nr_frags != 0), but since the SKBTX_SHARED_FRAG flag is not set anywhere\\nthe __skb_linearize function will not be executed, then the buffer will\\nremain non-linear. Then the condition (offset \u003e= skb_headlen(skb))\\nbecomes true, which causes WARN_ON_ONCE in skb_checksum_help.\\n\\n2. The struct sk_buff and struct virtio_net_hdr members must be\\nmathematically related.\\n(gso_size) must be greater than (needed) otherwise WARN_ON_ONCE.\\n(remainder) must be greater than (needed) otherwise WARN_ON_ONCE.\\n(remainder) may be 0 if division is without remainder.\\n\\noffset+2 (4191) \u003e skb_headlen() (1116)\\nWARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\\nModules linked in:\\nCPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0\\nHardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023\\nRIP: 0010:skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\\nCode: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 \u003c0f\u003e 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef\\nRSP: 0018:ffffc90003a9f338 EFLAGS: 00010286\\nRAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209\\nRDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001\\nRBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000\\nR10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c\\nR13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d\\nFS:  0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\nCR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0\\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\\nCall Trace:\\n \u003cTASK\u003e\\n ip_do_fragment+0xa1b/0x18b0 net/ipv4/ip_output.c:777\\n ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584\\n ip_finish_output_gso net/ipv4/ip_output.c:286 [inline]\\n __ip_finish_output net/ipv4/ip_output.c:308 [inline]\\n __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295\\n ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323\\n NF_HOOK_COND include/linux/netfilter.h:303 [inline]\\n ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:433\\n dst_output include/net/dst.h:451 [inline]\\n ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129\\n iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82\\n ipip6_tunnel_xmit net/ipv6/sit.c:1034 [inline]\\n sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076\\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\\n xmit_one net/core/dev.c:3545 [inline]\\n dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561\\n __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346\\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\\n packet_xmit+0x257/0x380 net/packet/af_packet.c:276\\n packet_snd net/packet/af_packet.c:3087 [inline]\\n packet_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0xd5/0x180 net/socket.c:745\\n __sys_sendto+0x255/0x340 net/socket.c:2190\\n __do_sys_sendto net/socket.c:2202 [inline]\\n __se_sys_sendto net/socket.c:2198 [inline]\\n __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198\\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82\\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\\n\\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net: falta de verificaci\u00f3n virtio Dos comprobaciones faltantes en virtio_net_hdr_to_skb() permitieron a syzbot bloquear los kernels nuevamente 1. Despu\u00e9s de la funci\u00f3n skb_segment, el b\u00fafer puede volverse no lineal (nr_frags! = 0), pero como el indicador SKBTX_SHARED_FRAG no est\u00e1 configurado en ning\u00fan lugar, la funci\u00f3n __skb_linearize no se ejecutar\u00e1, entonces el b\u00fafer permanecer\u00e1 no lineal. Entonces la condici\u00f3n (offset \u0026gt;= skb_headlen(skb)) se vuelve verdadera, lo que provoca WARN_ON_ONCE en skb_checksum_help. 2. Los miembros de struct sk_buff y struct virtio_net_hdr deben estar relacionados matem\u00e1ticamente. (gso_size) debe ser mayor que (necesario); de lo contrario, WARN_ON_ONCE. (resto) debe ser mayor que (necesario); de lo contrario, WARN_ON_ONCE. (resto) puede ser 0 si la divisi\u00f3n no tiene resto. offset+2 (4191) \u0026gt; skb_headlen() (1116) ADVERTENCIA: CPU: 1 PID: 5084 en net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303 M\u00f3dulos vinculados en: CPU : 1 PID: 5084 Comm: syz-executor336 No contaminado 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0 Nombre del hardware: Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2023 RIP: 0010:skb_checksum_help+0x5e2 /0x740 net/core/dev.c:3303 C\u00f3digo: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 \u0026lt;0f\u0026gt; 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef RSP: 0018:ffffc90003a9f338 EFLAGS: 00010286 RAX: RBX: ffff888025125780 RCX: ffffffff814db209 RDX: ffff888015393b80 RSI : ffffffff814db216 RDI: 0000000000000001 RBP: ffff8880251257f4 R08: 0000000000000001 R09: 00000000000000000 R10: 0000000000000000 R11: 000000000001 R12: 000000000000045c R13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d FS: 0000555555c24380(0000) 8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 00000 00000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Seguimiento de llamadas:  ip_do_fragment+0xa1b/0x18b0 net/ipv4 /ip_output.c:777 ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584 ip_finish_output_gso net/ipv4/ip_output.c:286 [en l\u00ednea] __ip_finish_output net/ipv4/ip_output.c:308 [en l\u00ednea] __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295 ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323 NF_HOOK_COND include/linux/netfilter.h:303 [en l\u00ednea] ip_output+0x13b/0x2a0 net/ipv4/ ip_output.c:433 dst_output include/net/dst.h:451 [en l\u00ednea] ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129 iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82 ipip6_tunnel_xmit net/ipv6 /sit.c:1034 [en l\u00ednea] sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076 __netdev_start_xmit include/linux/netdevice.h:4940 [en l\u00ednea] netdev_start_xmit include/linux/netdevice.h:4954 [en l\u00ednea] xmit_one net/core/dev.c:3545 [en l\u00ednea] dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561 __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [en l\u00ednea] paquete_xmit+0x257/0x380 net/packet/af_packet.c:276 paquete_snd net/packet/af_packet.c:3087 [en l\u00ednea] paquete_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c :730 [en l\u00ednea] __sock_sendmsg+0xd5/0x180 net/socket.c:745 __sys_sendto+0x255/0x340 net/socket.c:2190 __do_sys_sendto net/socket.c:2202 [en l\u00ednea] __se_sys_sendto net/socket.c:2198 [en l\u00ednea ] __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198 do_syscall_x64 arch/x86/entry/common.c:51 [en l\u00ednea] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0x63/ 0x6b encontrado por el Centro de verificaci\u00f3n de Linux (linuxtesting.org) con Syzkaller\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"include/linux/virtio_net.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\",\"lessThan\":\"27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\",\"lessThan\":\"5b1997487a3f3373b0f580c8a20b56c1b64b0775\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\",\"lessThan\":\"90d41ebe0cd4635f6410471efc1dd71b33e894cf\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\",\"lessThan\":\"e9164903b8b303c34723177b02fe91e49e3c4cd7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\",\"lessThan\":\"e269d79c7d35aa3808b1f3c1737d63dab504ddc8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2789bc090f4a2caef0cceb3f108867de608bb23a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16851e34b621bc7e652c508bb28c47948fb86958\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a05fb4ac72fb2ddbdcb135c87b0087ac59fa4de4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a36703d08c83b1488a2f2922f0dc4263125ccd2d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.14.242\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.201\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.121\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.10.39\",\"lessThan\":\"5.11\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"include/linux/virtio_net.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.12\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.12\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.165\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.103\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.44\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.3\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:09:12.881524Z\",\"id\":\"CVE-2024-43817\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.12\",\"versionEndExcluding\":\"5.15.165\",\"matchCriteriaId\":\"1666B32A-662E-4BCD-AD39-98FBEB2BEBEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.103\",\"matchCriteriaId\":\"E45EAC72-8329-4F99-8276-86AF9BB3496A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.44\",\"matchCriteriaId\":\"CC912330-6B41-4C6B-99AF-F3857FBACB6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.3\",\"matchCriteriaId\":\"92D388F2-1EAF-4CFA-AC06-5B26D762EA7D\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5b1997487a3f3373b0f580c8a20b56c1b64b0775\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/90d41ebe0cd4635f6410471efc1dd71b33e894cf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e269d79c7d35aa3808b1f3c1737d63dab504ddc8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e9164903b8b303c34723177b02fe91e49e3c4cd7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-28T08:05:54+00:00",
      "cve": "CVE-2024-43817",
      "id": "CVE-2024-43817",
      "initial_release_date": "2024-08-17T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_affected": "112",
      "product_status:known_not_affected": "8",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: missing check virtio",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-43817.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:33:58Z",
      "cve": "CVE-2024-43817",
      "id": "CVE-2024-43817",
      "initial_release_date": "2024-08-18T02:02:00Z",
      "product_status:known_affected": "421",
      "product_status:known_not_affected": "219",
      "product_status:recommended": "624",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-43817",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-43817.json",
      "version": "70"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:05:03.390Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-43817\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:09:12.881524Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:23.304Z\"}}], \"cna\": {\"title\": \"net: missing check virtio\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\", \"lessThan\": \"27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\", \"lessThan\": \"5b1997487a3f3373b0f580c8a20b56c1b64b0775\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\", \"lessThan\": \"90d41ebe0cd4635f6410471efc1dd71b33e894cf\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\", \"lessThan\": \"e9164903b8b303c34723177b02fe91e49e3c4cd7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0f6925b3e8da0dbbb52447ca8a8b42b371aac7db\", \"lessThan\": \"e269d79c7d35aa3808b1f3c1737d63dab504ddc8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2789bc090f4a2caef0cceb3f108867de608bb23a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16851e34b621bc7e652c508bb28c47948fb86958\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a05fb4ac72fb2ddbdcb135c87b0087ac59fa4de4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"a36703d08c83b1488a2f2922f0dc4263125ccd2d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4.14.242\", \"lessThan\": \"4.15\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.19.201\", \"lessThan\": \"4.20\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.4.121\", \"lessThan\": \"5.5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.10.39\", \"lessThan\": \"5.11\", \"versionType\": \"semver\"}], \"programFiles\": [\"include/linux/virtio_net.h\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.12\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.12\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.15.165\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.103\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.44\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"include/linux/virtio_net.h\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/27874ca77bd2b05a3779c7b3a5c75d8dd7f0b40f\"}, {\"url\": \"https://git.kernel.org/stable/c/5b1997487a3f3373b0f580c8a20b56c1b64b0775\"}, {\"url\": \"https://git.kernel.org/stable/c/90d41ebe0cd4635f6410471efc1dd71b33e894cf\"}, {\"url\": \"https://git.kernel.org/stable/c/e9164903b8b303c34723177b02fe91e49e3c4cd7\"}, {\"url\": \"https://git.kernel.org/stable/c/e269d79c7d35aa3808b1f3c1737d63dab504ddc8\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: missing check virtio\\n\\nTwo missing check in virtio_net_hdr_to_skb() allowed syzbot\\nto crash kernels again\\n\\n1. After the skb_segment function the buffer may become non-linear\\n(nr_frags != 0), but since the SKBTX_SHARED_FRAG flag is not set anywhere\\nthe __skb_linearize function will not be executed, then the buffer will\\nremain non-linear. Then the condition (offset \u003e= skb_headlen(skb))\\nbecomes true, which causes WARN_ON_ONCE in skb_checksum_help.\\n\\n2. The struct sk_buff and struct virtio_net_hdr members must be\\nmathematically related.\\n(gso_size) must be greater than (needed) otherwise WARN_ON_ONCE.\\n(remainder) must be greater than (needed) otherwise WARN_ON_ONCE.\\n(remainder) may be 0 if division is without remainder.\\n\\noffset+2 (4191) \u003e skb_headlen() (1116)\\nWARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\\nModules linked in:\\nCPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0\\nHardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023\\nRIP: 0010:skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303\\nCode: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 \u003c0f\u003e 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef\\nRSP: 0018:ffffc90003a9f338 EFLAGS: 00010286\\nRAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209\\nRDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001\\nRBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000\\nR10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c\\nR13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d\\nFS:  0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\nCR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0\\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\\nCall Trace:\\n \u003cTASK\u003e\\n ip_do_fragment+0xa1b/0x18b0 net/ipv4/ip_output.c:777\\n ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584\\n ip_finish_output_gso net/ipv4/ip_output.c:286 [inline]\\n __ip_finish_output net/ipv4/ip_output.c:308 [inline]\\n __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295\\n ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323\\n NF_HOOK_COND include/linux/netfilter.h:303 [inline]\\n ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:433\\n dst_output include/net/dst.h:451 [inline]\\n ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129\\n iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82\\n ipip6_tunnel_xmit net/ipv6/sit.c:1034 [inline]\\n sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076\\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\\n xmit_one net/core/dev.c:3545 [inline]\\n dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561\\n __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346\\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\\n packet_xmit+0x257/0x380 net/packet/af_packet.c:276\\n packet_snd net/packet/af_packet.c:3087 [inline]\\n packet_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0xd5/0x180 net/socket.c:745\\n __sys_sendto+0x255/0x340 net/socket.c:2190\\n __do_sys_sendto net/socket.c:2202 [inline]\\n __se_sys_sendto net/socket.c:2198 [inline]\\n __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198\\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82\\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\\n\\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.165\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.103\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.44\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.3\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.14.242\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.19.201\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.4.121\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.10.39\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:52:55.878Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-43817\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:52:55.878Z\", \"dateReserved\": \"2024-08-17T09:11:59.270Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-17T09:21:39.636Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.