Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX] is set from the host kernel.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6211753fdfd05af9e08f54c8d0ba3ee516034878 before fc3139d9f4c1fe1c7d5f25f99676bd8e9c6a1041; affected 6211753fdfd05af9e08f54c8d0ba3ee516034878 before bc1909ef38788f2ee3d8011d70bf029948433051; affected 6211753fdfd05af9e08f54c8d0ba3ee516034878 before f9f1aed6c8a3427900da3121e1868124854569c3; affected 6211753fdfd05af9e08f54c8d0ba3ee516034878 before 103e17aac09cdd358133f9e00998b75d6c1f1518 |
| Linux / Linux | affected 3.11; unaffected 0 before 3.11; unaffected 6.6.118 through 6.6.*; unaffected 6.12.60 through 6.12.*; unaffected 6.17.10 through 6.17.*; unaffected 6.18 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/fc3139d9f4c1fe1c7d5f25f99676bd8e9c6a1041
- https://git.kernel.org/stable/c/bc1909ef38788f2ee3d8011d70bf029948433051
- https://git.kernel.org/stable/c/f9f1aed6c8a3427900da3121e1868124854569c3
- https://git.kernel.org/stable/c/103e17aac09cdd358133f9e00998b75d6c1f1518
ADP enrichment
No English description supplied.
No references supplied.