Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authenticator() to check the buffer size before checking the nonce.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 794586789800b16dcbe235452494f4223ac80413; affected 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 1c4422d8be81718ecb15d79aedff607323085201; affected 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before f564af387c8c28238f8ebc13314c589d7ba8475d |
| Linux / Linux | affected 6.16; unaffected 0 before 6.16; unaffected 6.18.23 through 6.18.*; unaffected 6.19.13 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/794586789800b16dcbe235452494f4223ac80413
- https://git.kernel.org/stable/c/1c4422d8be81718ecb15d79aedff607323085201
- https://git.kernel.org/stable/c/f564af387c8c28238f8ebc13314c589d7ba8475d
ADP enrichment
No English description supplied.
No references supplied.