Description
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f931551bafe1f10ded7f5282e2aa162c267a2e5d to < bda41654b6e0c125a624ca35d6d20beb8015b5d0affectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < 3f57c3f67fd93b4da86aeffea1ca32c484d054adaffectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < 60833707b968d5ae02a75edb7886dcd4a957cf0daffectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < 73d2892148aa4397a885b4f4afcfc5b27a325c42affectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < 0f8cdfff06829a0b0348b6debc29ff6a61967724affectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < c3e17e58f571f34c51aeb17274ed02c2ed5cf780affectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < 0d4395477741608d123dad51def9fe50b7ebe952affectedf931551bafe1f10ded7f5282e2aa162c267a2e5d to < d39bf40e55e666b5905fdbd46a0dced030ce87beaffected
Linux Linux
Default version status: affected
2.6.35affected0 to < 2.6.35unaffected4.4.292 to ≤ 4.4.*unaffected4.9.290 to ≤ 4.9.*unaffected4.14.255 to ≤ 4.14.*unaffected4.19.216 to ≤ 4.19.*unaffected5.4.157 to ≤ 5.4.*unaffected5.10.77 to ≤ 5.10.*unaffected5.14.16 to ≤ 5.14.*unaffected5.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/bda41654b6e0c125a624ca35d6d20beb8015b5d0 ↗
- https://git.kernel.org/stable/c/3f57c3f67fd93b4da86aeffea1ca32c484d054ad ↗
- https://git.kernel.org/stable/c/60833707b968d5ae02a75edb7886dcd4a957cf0d ↗
- https://git.kernel.org/stable/c/73d2892148aa4397a885b4f4afcfc5b27a325c42 ↗
- https://git.kernel.org/stable/c/0f8cdfff06829a0b0348b6debc29ff6a61967724 ↗
- https://git.kernel.org/stable/c/c3e17e58f571f34c51aeb17274ed02c2ed5cf780 ↗
- https://git.kernel.org/stable/c/0d4395477741608d123dad51def9fe50b7ebe952 ↗
- https://git.kernel.org/stable/c/d39bf40e55e666b5905fdbd46a0dced030ce87be ↗