In the Linux kernel, the following vulnerability has been resolved:

bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb

bpf_prog_test_run_skb() calls eth_type_trans() first and then uses
skb->protocol to initialize sk family and address fields for the test
run.

For IPv4 and IPv6 packets, it may access ip_hdr(skb) or ipv6_hdr(skb)
even when the provided test input only contains an Ethernet header.

Reject the input earlier if the Ethernet frame carries IPv4/IPv6
EtherType but the L3 header is too short.

Fold the IPv4/IPv6 header length checks into the existing protocol
switch and return -EINVAL before accessing the network headers.

https://git.kernel.org/stable/c/0a04db240effd85773f66244645a28cedddb72d2

https://git.kernel.org/stable/c/12bec2bd4b76d81c5d3996bd14ec1b7f4d983747

https://git.kernel.org/stable/c/1f882c492d46f90bdb36f4936876c88c28dab21c

https://git.kernel.org/stable/c/6a9f38d5ff11e00bc54baab752642978805e81eb

https://git.kernel.org/stable/c/6def5fe753cbe5b279ee5fd10327b2611cbddaca

https://git.kernel.org/stable/c/7254267799d083280c0e53effc101a33add95f7b

https://git.kernel.org/stable/c/8042240412de3222d27b31e89d29336961cad9e4

https://git.kernel.org/stable/c/e6aa481f21fc7a41ed344767ea25aae9d03fae71

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/bpf/test_run.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"7254267799d083280c0e53effc101a33add95f7b","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"6a9f38d5ff11e00bc54baab752642978805e81eb","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"e6aa481f21fc7a41ed344767ea25aae9d03fae71","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"0a04db240effd85773f66244645a28cedddb72d2","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"1f882c492d46f90bdb36f4936876c88c28dab21c","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"8042240412de3222d27b31e89d29336961cad9e4","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"6def5fe753cbe5b279ee5fd10327b2611cbddaca","versionType":"git","status":"affected"},{"version":"fa5cb548ced61b9d3095f32f8a7e427a248c65ee","lessThan":"12bec2bd4b76d81c5d3996bd14ec1b7f4d983747","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/bpf/test_run.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.9","status":"affected"},{"version":"0","lessThan":"5.9","versionType":"semver","status":"unaffected"},{"version":"5.10.258","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.209","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.175","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.141","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.91","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.33","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.10","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]