References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Known Affected Software Configurations Switch to CPE 2.2

Change History

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 5.16.11

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST CWE-416

https://git.kernel.org/stable/c/c98bed60cdd7f22237ae256cc9c1c3087206b8a2 No Types Assigned

https://git.kernel.org/stable/c/c98bed60cdd7f22237ae256cc9c1c3087206b8a2 Mailing List, Patch

https://git.kernel.org/stable/c/ef57640575406f57f5b3393cf57f457b0ace837e No Types Assigned

https://git.kernel.org/stable/c/ef57640575406f57f5b3393cf57f457b0ace837e Mailing List, Patch

In the Linux kernel, the following vulnerability has been resolved:

net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()

ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if
this is the same as the port's pvid_vlan which we access afterwards,
what we're accessing is freed memory.

Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior
to calling ocelot_vlan_member_del().

kernel.org https://git.kernel.org/stable/c/c98bed60cdd7f22237ae256cc9c1c3087206b8a2 [No types assigned]

kernel.org https://git.kernel.org/stable/c/ef57640575406f57f5b3393cf57f457b0ace837e [No types assigned]