Threats tagged 'ghsa-8w27-88hq-2pm4'

A vulnerability in the Linux kernel's af_packet subsystem was resolved, involving improper casting of the tpacket_hdr.tp_len field from u32 to int in the tpacket_parse_header() function. This casting error could cause negative values to be returned, leading to a kernel BUG() in sock_sendmsg_nosec(). The issue was identified by syzbot and results from tp_len values larger than INT_MAX being misinterpreted. The vulnerability affects specific Linux kernel versions listed and can cause kernel crashes.