Linux kernel 5.10.272 (longterm) was primarily a maintenance and stability release focused on fixing memory safety and networking issues. Among the security-relevant fixes, the most notable addressed a use-after-free vulnerability in IPv4 by ensuring inet_opt and ireq_opt structures are freed only after an RCU grace period, preventing potential exploitation of freed memory. Another key fix validated the checksum_start field before completing checksum calculations in IPv4 processing, guarding against malformed packet handling that could lead to memory corruption. Additionally, a netfilter fix resolved a regression in nfnetlink_queue that had broken SCTP traffic handling, restoring proper packet queue functionality for that protocol.
Betroffene Bereiche
Bereich
Commits
ipv4
2
netfilter
1
Änderungen (3)
ipv4: free inet_opt and ireq_opt after an RCU grace period
ipv4: validate checksum_start before completing checksum