Description: net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets References: Notes: carnil> Introduced in c129412f74e9 ("net/sched: sch_frag: add generic packet fragment carnil> support."). Vulnerable versions: 5.11-rc1. Bugs: upstream: released (5.13-rc1) [31fe34a0118e0acc958c802e830ad5d37ef6b1d3] 6.7-upstream-stable: N/A "Fixed before branching point" 6.6-upstream-stable: N/A "Fixed before branching point" 6.1-upstream-stable: N/A "Fixed before branching point" 5.10-upstream-stable: N/A "Vulnerable code not present" 4.19-upstream-stable: N/A "Vulnerable code not present" sid: N/A "Vulnerable code not present" 6.1-bookworm-security: N/A "Fixed before branching point" 5.10-bullseye-security: N/A "Vulnerable code not present" 4.19-buster-security: N/A "Vulnerable code not present"