Linux Kernel Out-of-Bounds Access Vulnerability in IOAM6 Net Component

A vulnerability in the Linux kernel's IOAM6 net component can lead to out-of-bounds access in the transmission queue array. This issue arises when a packet is on the reception path, and the queue mapping exceeds the number of available transmission queues, potentially causing memory corruption. The vulnerability has been addressed by adding a check to prevent the index from exceeding the allowed range. Additionally, a missing lock around queue statistics has been added to ensure proper synchronization.

Impact

Exploitation of this vulnerability can lead to out-of-bounds memory access, which may cause memory corruption or undefined behavior in the kernel.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.