Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that the NIC might send us stats for a subset of queues. Without this change, gve_get_ethtool_stats might make an invalid access on the priv->stats_report->stats array.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 2f523dc34ac8c355609e9b847852bf25bbdb30bf before acf609843a848e2c22ccce98eef109330403380d; affected 2f523dc34ac8c355609e9b847852bf25bbdb30bf before 32675d828c8a392e20d5b42375ed112c407e4b62; affected 2f523dc34ac8c355609e9b847852bf25bbdb30bf before af9bcf910b1f86244f39e15e701b2dc564b469a6 |
| Linux / Linux | affected 5.10; unaffected 0 before 5.10; unaffected 6.6.160 through 6.6.*; unaffected 6.9.9 through 6.9.*; unaffected 6.10 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/acf609843a848e2c22ccce98eef109330403380d
- https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62
- https://git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.