Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow. Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c0c050c58d840994ba842ad1c338a98e7c12b764 before d5eaf2a6b077f32a477feb1e9e1c1f60605b460e; affected c0c050c58d840994ba842ad1c338a98e7c12b764 before efb1a257513438d43f4335f09b2f684e8167cad2; affected c0c050c58d840994ba842ad1c338a98e7c12b764 before 17e0453a7523ad7a25bb47af941b150a6c66d7b6; affected c0c050c58d840994ba842ad1c338a98e7c12b764 before 7c6dddc239abe660598c49ec95ea0ed6399a4b2a |
| Linux / Linux | affected 4.4; unaffected 0 before 4.4; unaffected 5.15.113 through 5.15.*; unaffected 6.1.30 through 6.1.*; unaffected 6.3.4 through 6.3.*; unaffected 6.4 through * |
CWE
No CWE identifiers supplied.