Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value comes from the user. It is passed to: if (cpu_online(pp->rxq_def)) inside the mvneta_percpu_elect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected cad5d847a093077b499a8b0bbfe6804b9226c03e before 3ceffb8f410b93553fb16fe7e84aa0d35b3ba79b; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before 47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92c; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before 5a142486a0db6b0b85031f22d69acd0cdcf8f72b; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before 146ebee8fcdb349d7ec0e49915e6cdafb92544ae; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before a6b30598fec84f8809f5417cde73071ca43e8471; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before 6ca0a506dddc3e1d636935eef339576b263bf3d8; affected cad5d847a093077b499a8b0bbfe6804b9226c03e before e8b4fc13900b8e8be48debffd0dfd391772501f7 |
| Linux / Linux | affected 4.5; unaffected 0 before 4.5; unaffected 4.9.336 through 4.9.*; unaffected 4.14.302 through 4.14.*; unaffected 4.19.269 through 4.19.*; unaffected 5.4.227 through 5.4.*; unaffected 5.10.159 through 5.10.*; unaffected 5.15.83 through 5.15.*; unaffected 6.0.13 through 6.0.*; unaffected 6.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/3ceffb8f410b93553fb16fe7e84aa0d35b3ba79b
- https://git.kernel.org/stable/c/47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92c
- https://git.kernel.org/stable/c/5a142486a0db6b0b85031f22d69acd0cdcf8f72b
- https://git.kernel.org/stable/c/eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50
- https://git.kernel.org/stable/c/146ebee8fcdb349d7ec0e49915e6cdafb92544ae
- https://git.kernel.org/stable/c/a6b30598fec84f8809f5417cde73071ca43e8471
- https://git.kernel.org/stable/c/6ca0a506dddc3e1d636935eef339576b263bf3d8
- https://git.kernel.org/stable/c/e8b4fc13900b8e8be48debffd0dfd391772501f7
ADP enrichment
No English description supplied.
No references supplied.