Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-47148

octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() This function is called from ethtool_set_rxfh() and "*rss_context" comes from the user. Add some bounds checking to prevent memory corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 81a4362016e7d8b17031fe1aa43cdb58a7f0f163 to < 389146bc6d2bbb20714d06624b74856320ce40f7affected
  • 81a4362016e7d8b17031fe1aa43cdb58a7f0f163 to < e5cc361e21648b75f935f9571d4003aaee480214affected

Linux Linux

Default version status: affected

  • 5.12affected
  • 0 to < 5.12unaffected
  • 5.12.9 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References