Threats tagged 'ghsa-qfj9-3jj2-w6g8'

A vulnerability in the Linux kernel's PPP asynchronous driver (ppp_async) could cause a kernel panic or out-of-bounds read due to improper handling of skb headroom when processing errored frames. The issue arises because the errored frame handling resets skb headroom incorrectly, violating the NET_SKB_PAD guarantee and leading to memory corruption. The vulnerability can be triggered remotely by a peer sending crafted frames, resulting in a denial-of-service (DoS) condition. A patch has been applied to drop errored frames instead of resetting headroom, preventing the kernel panic and out-of-bounds read.