Linux Kernel UDP skb Orphan Vulnerability in Stable Versions

A vulnerability in the Linux kernel's UDP handling has been addressed. The issue arises because the standard UDP receive path does not utilize the skb->destructor, while the skmsg layer does. This discrepancy triggers a warning in the skb_attempt_defer_free function, indicating the need for intervention. The vulnerability has been resolved by ensuring that skb_orphan() is called before skb_attempt_defer_free(), thereby aligning the UDP receive path with the requirements of the skmsg layer.

Impact

The vulnerability could lead to improper handling of socket buffers in the UDP receive path, potentially causing issues in message processing or delivery.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.