In the Linux kernel, the following vulnerability has been resolved:

netlabel: validate unlabeled address and mask attribute lengths

netlbl_unlabel_addrinfo_get() used the address attribute length to
determine whether the attribute data could be read as an IPv4 or IPv6
address, but did not independently validate the corresponding mask
attribute length.  A crafted Generic Netlink request could therefore
provide a valid IPv4/IPv6 address attribute with a shorter mask
attribute, which would later be read as a full struct in_addr or
struct in6_addr.

NLA_BINARY policy lengths are maximum lengths by default, so use
NLA_POLICY_EXACT_LEN() for the unlabeled IPv4/IPv6 address and mask
attributes.  This rejects short attributes during policy validation and
also exposes the exact length requirements through policy introspection.

https://git.kernel.org/stable/c/07a18f5c90dd3d586b73242f5a5bbf0a72f2fdc6

https://git.kernel.org/stable/c/0c4bb32ad7fdc2dc6a8050f41eb04d4bda56b6c8

https://git.kernel.org/stable/c/672f0f3b8f875ffe6525a37847eafa7648c4c0c6

https://git.kernel.org/stable/c/71c52da13c3737493b42d20d9f33de34e03b3156

https://git.kernel.org/stable/c/95bda3eac0b1454c2cee98d58d9ba6dd8391e843

https://git.kernel.org/stable/c/975a84fd741440853380d37465b6e226cf47254c

https://git.kernel.org/stable/c/9772589b57e44aedc240211c5c3f7a684a034d3a

https://git.kernel.org/stable/c/ccfe292a966079c61ea68a2da303b2a336170993

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/netlabel/netlabel_unlabeled.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"975a84fd741440853380d37465b6e226cf47254c","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"672f0f3b8f875ffe6525a37847eafa7648c4c0c6","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"95bda3eac0b1454c2cee98d58d9ba6dd8391e843","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"07a18f5c90dd3d586b73242f5a5bbf0a72f2fdc6","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"71c52da13c3737493b42d20d9f33de34e03b3156","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"0c4bb32ad7fdc2dc6a8050f41eb04d4bda56b6c8","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"ccfe292a966079c61ea68a2da303b2a336170993","versionType":"git","status":"affected"},{"version":"8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd","lessThan":"9772589b57e44aedc240211c5c3f7a684a034d3a","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/netlabel/netlabel_unlabeled.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.25","status":"affected"},{"version":"0","lessThan":"2.6.25","versionType":"semver","status":"unaffected"},{"version":"5.10.259","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.210","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.176","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.143","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.94","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.36","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.13","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]