Description (CNA)
An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Kernel | affected Linux kernel 5.17-rc1 |
CWE
CWE-190
References
- https://lore.kernel.org/netdev/20220123001216.2460383-13-sashal%40kernel.org/
- http://www.openwall.com/lists/oss-security/2022/04/02/1
- https://security.netapp.com/advisory/ntap-20220513-0003/
ADP enrichment
No English description supplied.