Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather->end of ULONG_MAX, but if this happens it will infinite loop because of the overflow. Also avoid overflow computing the length by moving the +1 to the other side of the <
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 488ffbf181718b9ad8c1838cb249d60973e78eda before 9f0632b0d4246675fa221aa1a3bffadf9c6bd9ac; affected 488ffbf181718b9ad8c1838cb249d60973e78eda before e4b7687784153481de45fd39fb97ba3919605c0c; affected 488ffbf181718b9ad8c1838cb249d60973e78eda before 40a13b49957937427bc23e78eb50679df4396a47 |
| Linux / Linux | affected 6.13; unaffected 0 before 6.13; unaffected 6.18.33 through 6.18.*; unaffected 7.0.10 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.