Threats tagged 'ghsa-59xx-49mr-rmvq'

A vulnerability in the Linux kernel's ppp_synctty component was resolved. The function ppp_sync_txmunge() did not ensure the socket buffer (skb) header was writable before modifying it, potentially allowing data corruption when bridging PPP channels. This could occur if a received skb bypassed the usual writable checks, such as when a PPPoE frame shares its buffer with a clone queued to an AF_PACKET socket and is bridged to a synchronous tty channel. The fix involves using skb_cow_head() to guarantee both sufficient headroom and a writable header.