Description
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux kernel
Default version status: unaffected
2.6.22 to < 4.19.283affected4.20 to < 5.4.243affected5.5 to < 5.10.180affected5.11 to < 5.15.111affected5.16 to < 6.1.28affected6.2 to < 6.2.15affected6.3 to < 6.3.2affected
References
- https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/ ↗
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 ↗
- https://www.debian.org/security/2023/dsa-5448 ↗
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html ↗
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1 ↗
- https://www.debian.org/security/2023/dsa-5480 ↗
- https://security.netapp.com/advisory/ntap-20230824-0006/ ↗
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html ↗