Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53080

xsk: Add missing overflow check in xdp_umem_reg

Description

In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdp_umem_reg The number of chunks can overflow u32. Make sure to return -EINVAL on overflow. Also remove a redundant u32 cast assigning umem->npgs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bbff2f321a864ee07c9d3d1245af498023146951 to < 580634b03a55f04a3c1968bcbd97736c079c6601affected
  • bbff2f321a864ee07c9d3d1245af498023146951 to < 3cfc3564411acf96bf2fb791f706a1aa4f872c1daffected
  • bbff2f321a864ee07c9d3d1245af498023146951 to < a069909acc4435eeb41d05ccc03baa447cc01b7eaffected
  • bbff2f321a864ee07c9d3d1245af498023146951 to < bb2e3bfb2a79db0c2057c6f701b782954394c67faffected
  • bbff2f321a864ee07c9d3d1245af498023146951 to < c7df4813b149362248d6ef7be41a311e27bf75feaffected

Linux Linux

Default version status: affected

  • 4.18affected
  • 0 to < 4.18unaffected
  • 5.10.177 to ≤ 5.10.*unaffected
  • 5.15.105 to ≤ 5.15.*unaffected
  • 6.1.22 to ≤ 6.1.*unaffected
  • 6.2.9 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References