Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_420xx - fix off by one in uof_get_name() This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of bounds access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected fcf60f4bcf54952cc14d14178c358be222dbeb43 before c23661a36eea840b657e485d48ed88b246da1bb8; affected fcf60f4bcf54952cc14d14178c358be222dbeb43 before 91eef1ad75f03d37dba926b73f9dd6f058bc4d58; affected fcf60f4bcf54952cc14d14178c358be222dbeb43 before 93a11608fb3720e1bc2b19a2649ac2b49cca1921 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 6.11.11 through 6.11.*; unaffected 6.12.2 through 6.12.*; unaffected 6.13 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/c23661a36eea840b657e485d48ed88b246da1bb8
- https://git.kernel.org/stable/c/91eef1ad75f03d37dba926b73f9dd6f058bc4d58
- https://git.kernel.org/stable/c/93a11608fb3720e1bc2b19a2649ac2b49cca1921
ADP enrichment
No English description supplied.
No references supplied.