Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of socket buffer (SKB) references in Precision Time Protocol (PTP) flows has been addressed. When a driver requests a transmission (Tx) timestamp, it clones the SKB to prevent it from being prematurely freed by other components. However, there are scenarios where the requested SKB is not consumed, such as when a PTP application is reset while running. This can lead to SKBs not being properly released, causing potential memory management issues. The vulnerability has been fixed by adding a check to ensure that SKBs assigned to the Tx timestamp latch are properly freed before releasing them, thereby preventing any leftover SKBs from causing problems.
The vulnerability could lead to improper management of socket buffers in PTP flows, potentially causing memory leaks or other related issues.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.