Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length (might come from an untrusted device) to avoid data corruption or loss.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f6b10209b90d48a84f886ab2b317b5d2cbfe3143 before c1b40d1959517ff2ea473d40eeab4691d6d62462; affected f6b10209b90d48a84f886ab2b317b5d2cbfe3143 before c92298d228f61589dd21657af2bea95fc866b813; affected f6b10209b90d48a84f886ab2b317b5d2cbfe3143 before 3133e01514c3c498f2b01ff210ee6134b70c663c; affected f6b10209b90d48a84f886ab2b317b5d2cbfe3143 before ba710baa1cc1b17a0483f7befe03e696efd17292; affected f6b10209b90d48a84f886ab2b317b5d2cbfe3143 before ad993a95c508417acdeb15244109e009e50d8758 |
| Linux / Linux | affected 4.11; unaffected 0 before 4.11; unaffected 5.4.293 through 5.4.*; unaffected 5.10.51 through 5.10.*; unaffected 5.12.18 through 5.12.*; unaffected 5.13.3 through 5.13.*; unaffected 5.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/c1b40d1959517ff2ea473d40eeab4691d6d62462
- https://git.kernel.org/stable/c/c92298d228f61589dd21657af2bea95fc866b813
- https://git.kernel.org/stable/c/3133e01514c3c498f2b01ff210ee6134b70c663c
- https://git.kernel.org/stable/c/ba710baa1cc1b17a0483f7befe03e696efd17292
- https://git.kernel.org/stable/c/ad993a95c508417acdeb15244109e009e50d8758
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.