Description
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow and sign extension problems in io_provide_buffers_prep(). As Linus pointed out previous attempt did nothing useful, see d81269fecb8ce ("io_uring: fix provide_buffers sign extension"). Do that with help of check_<op>_overflow helpers. And fix struct io_provide_buf::len type, as it doesn't make much sense to keep it signed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
efe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to < cbbc13b115b8f18e0a714d89f87fbdc499acfe2daffectedefe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to < 51bf90901952aaac564bbdb36b2b503050c53dd9affectedefe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to < 84b8c266c4bfe9ed5128e13253c388deb74b1b03affectedefe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to < 38134ada0ceea3e848fe993263c0ff6207fd46e7affected
Linux Linux
Default version status: affected
5.8affected0 to < 5.8unaffected5.10.37 to ≤ 5.10.*unaffected5.11.21 to ≤ 5.11.*unaffected5.12.4 to ≤ 5.12.*unaffected5.13 to ≤ *unaffected