Description
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length (might come from an untrusted device) to avoid data corruption or loss.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f6b10209b90d48a84f886ab2b317b5d2cbfe3143 to < c1b40d1959517ff2ea473d40eeab4691d6d62462affectedf6b10209b90d48a84f886ab2b317b5d2cbfe3143 to < c92298d228f61589dd21657af2bea95fc866b813affectedf6b10209b90d48a84f886ab2b317b5d2cbfe3143 to < 3133e01514c3c498f2b01ff210ee6134b70c663caffectedf6b10209b90d48a84f886ab2b317b5d2cbfe3143 to < ba710baa1cc1b17a0483f7befe03e696efd17292affectedf6b10209b90d48a84f886ab2b317b5d2cbfe3143 to < ad993a95c508417acdeb15244109e009e50d8758affected
Linux Linux
Default version status: affected
4.11affected0 to < 4.11unaffected5.4.293 to ≤ 5.4.*unaffected5.10.51 to ≤ 5.10.*unaffected5.12.18 to ≤ 5.12.*unaffected5.13.3 to ≤ 5.13.*unaffected5.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c1b40d1959517ff2ea473d40eeab4691d6d62462 ↗
- https://git.kernel.org/stable/c/c92298d228f61589dd21657af2bea95fc866b813 ↗
- https://git.kernel.org/stable/c/3133e01514c3c498f2b01ff210ee6134b70c663c ↗
- https://git.kernel.org/stable/c/ba710baa1cc1b17a0483f7befe03e696efd17292 ↗
- https://git.kernel.org/stable/c/ad993a95c508417acdeb15244109e009e50d8758 ↗