The Linux kernel's HSR network code had a flaw where the supervision frame handling did not fully linearize the entire TLV header before accessing it. Specifically, the pskb_may_pull() calls lacked the addition of sizeof(struct hsr_sup_tlv), which could allow an out-of-bounds access if a truncated frame was processed. This vulnerability has been resolved by adding the missing size to the pskb_may_pull() calls to ensure safe memory access.

This vulnerability could lead to out-of-bounds memory access in the kernel when processing malformed or truncated HSR supervision frames. Such memory access issues can cause kernel crashes or potentially allow attackers to execute arbitrary code or escalate privileges. However, no known exploits are reported in the wild at this time.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the pskb_may_pull() calls to include the full size of the TLV header. Users and administrators should apply the official kernel updates that include this patch once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the current remediation status and apply updates accordingly.