Linux Kernel batman-adv Out-of-Bounds Read/Write Vulnerability in Network Coding Decoding

A vulnerability allowing out-of-bounds read and write has been identified in the Linux kernel's batman-adv module, specifically within the network coding decoding function. This issue arises because the function improperly trusts the length of coded data and only checks against the total length of the packet. As a result, the decoding process can read and write data outside the intended boundaries, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability causes out-of-bounds memory access, which can lead to memory corruption.

Reproduction

The vulnerability can be reproduced by sending coded packets that exploit the lack of proper length validation in the 'batadv_nc_skb_decode_packet' function. The decoding process will then read and write data outside the allocated buffer boundaries.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched.