Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate user vectors against the device's dma_alignment as the bio is built from the iov_iter, rejecting misaligned early with -EINVAL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 5ff3f74e145adc79b49668adb8de276446acf6be before d44a97a3b1c00cc571245124e23e5ceb0a0225a0; affected 5ff3f74e145adc79b49668adb8de276446acf6be before 14b007e178811db72fbb1ebb3535160db6ec1e6a |
| Linux / Linux | affected 6.18; unaffected 0 before 6.18; unaffected 7.2.4 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.