Linux Kernel ARP Header Handling Vulnerability

A vulnerability in the Linux kernel's ARP handling has been addressed. The issue arose because the function 'dev_hard_header()' can modify the 'skb->head' pointer, contrary to the assumption made by 'arp_create()'. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to improper handling of ARP packets, potentially causing network communication issues or allowing for ARP spoofing attacks.

Reproduction

The vulnerability can be reproduced by calling the 'arp_create()' function with a device that has a modified 'dev_hard_header()' implementation. This will demonstrate the assumption that 'skb->head' remains unchanged, which is no longer valid.

Remediation

Users can update to the latest version of the Linux kernel stable tree, where this vulnerability has been fixed.