Linux Kernel Macvlan Attribute Policy Vulnerability Leading to Heap Out-of-Bounds Read

A vulnerability in the Linux kernel's macvlan driver allows for a heap out-of-bounds read. This issue arises from the IFLA_MACVLAN_BC_CUTOFF attribute, which was introduced to manage broadcast cutoff but lacked proper policy enforcement. As a result, a malicious user could manipulate the attribute to bypass length checks, potentially leading to memory corruption. This vulnerability mirrors the issues presented in CVE-2023-3773.

Impact

Exploitation of this vulnerability causes a heap out-of-bounds read, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.