Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc. Check the size specified for write buffers before allocating. [PM: subject tweak]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before 976284b94f2021df09829e37a367e19b84d9e5f3; affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before ecf6a4a558097920447a6fb84dfdb279e2ac749a; affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before a0dec65f88c8d9290dfa1d2ca1e897abe54c5881; affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before 96fae5bd1589731592d30b3953a90a77ef3928a6; affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before 36b385d0f2b4c0bf41d491e19075ecd990d2bf94; affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before c71d35676d46090c891b6419f253fb92a1a9f4eb; affected aeca4e2ca65c1aeacfbe520684e6421719d99417 before f09ff307c7299392f1c88f763299e24bc99811c7 |
| Linux / Linux | affected 5.1; unaffected 0 before 5.1; unaffected 5.10.235 through 5.10.*; unaffected 5.15.179 through 5.15.*; unaffected 6.1.129 through 6.1.*; unaffected 6.6.78 through 6.6.*; unaffected 6.12.14 through 6.12.*; unaffected 6.13.3 through 6.13.*; unaffected 6.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/976284b94f2021df09829e37a367e19b84d9e5f3
- https://git.kernel.org/stable/c/ecf6a4a558097920447a6fb84dfdb279e2ac749a
- https://git.kernel.org/stable/c/a0dec65f88c8d9290dfa1d2ca1e897abe54c5881
- https://git.kernel.org/stable/c/96fae5bd1589731592d30b3953a90a77ef3928a6
- https://git.kernel.org/stable/c/36b385d0f2b4c0bf41d491e19075ecd990d2bf94
- https://git.kernel.org/stable/c/c71d35676d46090c891b6419f253fb92a1a9f4eb
- https://git.kernel.org/stable/c/f09ff307c7299392f1c88f763299e24bc99811c7
ADP enrichment
No English description supplied.
No English description supplied.