Linux Kernel Rxrpc Paged Fragments Vulnerability Unshared Data and Response Packets

A vulnerability in the Linux kernel's Rxrpc implementation has been addressed. The issue arose because the DATA and RESPONSE packet handlers did not properly unshare packets containing externally-owned paged fragments before processing them. This oversight allowed such packets to bypass necessary security operations, leading to potential vulnerabilities. The problem has been fixed by extending the packet handling to unshare these fragments, ensuring proper security measures are applied.

Impact

Exploitation of this vulnerability could lead to improper handling of packet decryption, potentially allowing for security operations to be bypassed.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.