Description
In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, so 2 * max_entries will overflow u32 when mapping producer page and data pages. Only casting max_entries to size_t is not enough, because for 32-bits application on 64-bits kernel the size of read-only mmap region also could overflow size_t. So fixing it by casting the size of read-only mmap region into a __u64 and checking whether or not there will be overflow during mmap.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bf99c936f9478a05d51e9f101f90de70bee9a89c to < 8a549ab6724520aa3c07f47e0eba820293551490affectedbf99c936f9478a05d51e9f101f90de70bee9a89c to < 0140e079a42064680394fff1199a7b5483688decaffectedbf99c936f9478a05d51e9f101f90de70bee9a89c to < 535a25ab4f9a45f74ba38ab71de95e97474922edaffectedbf99c936f9478a05d51e9f101f90de70bee9a89c to < 927cbb478adf917e0a142b94baa37f06279cc466affected
Linux Linux
Default version status: affected
5.8affected0 to < 5.8unaffected5.10.158 to ≤ 5.10.*unaffected5.15.82 to ≤ 5.15.*unaffected6.0.12 to ≤ 6.0.*unaffected6.1 to ≤ *unaffected