CVE-2024-50252

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address

The device stores IPv6 addresses that are used for encapsulation in

linear memory that is managed by the driver.

Changing the remote address of an ip6gre net device never worked

properly, but since cited commit the following reproducer [1] would

result in a warning [2] and a memory leak [3]. The problem is that the

new remote address is never added by the driver to its hash table (and

therefore the device) and the old address is never removed from it.

Fix by programming the new address when the configuration of the ip6gre

net device changes and removing the old one. If the address did not

change, then the above would result in increasing the reference count of

the address and then decreasing it.

[1]

# ip link add name bla up type ip6gre local 2001:db8:1::1 remote 2001:db8:2::1 tos inherit ttl inherit

# ip link set dev bla type ip6gre remote

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References