In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | 12.4(24)T1 |
| Linux | Linux | 12.4(9)T4 |
| Linux | Linux | NA |
| Linux | Linux | 2013 Service Pack 1 (64-bit editions) |