Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ccb1352e76cff0524e7ccb2074826a092dd13016 before 54c6957d1123a2032099b9eab51c314800f677ce; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before 7fcaec0b2ab8fa5fbf0b45e5512364a168f445bd; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before a27526e6b48eee9e2d82efff502c4f272f1a91d4; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before 1489c195c8eecd262aa6712761ba5288203e28ec; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before 824a7c2df5127b2402b68a21a265d413e78dcad7; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before be80768d4f3b6fd13f421451cc3fee8778aba8bc; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before 03d7262dd53e8c404da35cc81aaa887fd901f76b; affected ccb1352e76cff0524e7ccb2074826a092dd13016 before 65d91192aa66f05710cfddf6a14b5a25ee554dba |
| Linux / Linux | affected 3.3; unaffected 0 before 3.3; unaffected 5.4.293 through 5.4.*; unaffected 5.10.237 through 5.10.*; unaffected 5.15.181 through 5.15.*; unaffected 6.1.135 through 6.1.*; unaffected 6.6.88 through 6.6.*; unaffected 6.12.25 through 6.12.*; unaffected 6.14.4 through 6.14.*; unaffected 6.15 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/54c6957d1123a2032099b9eab51c314800f677ce
- https://git.kernel.org/stable/c/7fcaec0b2ab8fa5fbf0b45e5512364a168f445bd
- https://git.kernel.org/stable/c/a27526e6b48eee9e2d82efff502c4f272f1a91d4
- https://git.kernel.org/stable/c/1489c195c8eecd262aa6712761ba5288203e28ec
- https://git.kernel.org/stable/c/824a7c2df5127b2402b68a21a265d413e78dcad7
- https://git.kernel.org/stable/c/be80768d4f3b6fd13f421451cc3fee8778aba8bc
- https://git.kernel.org/stable/c/03d7262dd53e8c404da35cc81aaa887fd901f76b
- https://git.kernel.org/stable/c/65d91192aa66f05710cfddf6a14b5a25ee554dba
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.