Description
In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in fib_metrics_match() if (!type) continue; if (type > RTAX_MAX) return false; ... fi_val = fi->fib_metrics->metrics[type - 1]; @type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 to < 8f0eb24f1a7a60ce635f0d757a46f1a37a4d467daffected5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 to < 7f9828fb1f688210e681268490576f0ca65c322aaffected5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 to < ca3cf947760de050d558293002ad3e7f4b8745d2affected5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 to < f9753ebd61be2d957b5504cbd3fd719674f05b7aaffected5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 to < 5e9398a26a92fc402d82ce1f97cc67d832527da0affected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.4.231 to ≤ 5.4.*unaffected5.10.166 to ≤ 5.10.*unaffected5.15.91 to ≤ 5.15.*unaffected6.1.9 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/8f0eb24f1a7a60ce635f0d757a46f1a37a4d467d ↗
- https://git.kernel.org/stable/c/7f9828fb1f688210e681268490576f0ca65c322a ↗
- https://git.kernel.org/stable/c/ca3cf947760de050d558293002ad3e7f4b8745d2 ↗
- https://git.kernel.org/stable/c/f9753ebd61be2d957b5504cbd3fd719674f05b7a ↗
- https://git.kernel.org/stable/c/5e9398a26a92fc402d82ce1f97cc67d832527da0 ↗