Executive Summary

This vulnerability exists in the Linux kernel's IP Virtual Server (ipvs) component. It involves the protocol checksum validation process for IPv6 packets. Specifically, the validation fails if there are IPv6 extension headers present before the protocol header. The issue arises because the length field (iph->len) already includes the offset of these headers, but the checksum validation did not account for this, leading to incorrect validation. The fix involves using the length field properly to skip the IPv6 extension headers during checksum checks.

Useful 0 Not Useful 0

Impact Analysis

Because the protocol checksum validation can fail when IPv6 extension headers are present, this could allow malformed or malicious packets to bypass checksum verification. This might lead to incorrect processing of network packets, potentially causing network communication issues or enabling certain types of attacks that rely on evading checksum validation.

Useful 0 Not Useful 0