Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
90b509b39ac9b09be88eb641c7a3abd8de06b698 to < ba6673824efa3dc198b04a54e69dce480066d7d9affected90b509b39ac9b09be88eb641c7a3abd8de06b698 to < 61054a8ddb176b155a8f2bacdfefb3727187f5d9affected90b509b39ac9b09be88eb641c7a3abd8de06b698 to < 5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8affected90b509b39ac9b09be88eb641c7a3abd8de06b698 to < 349638f7e5d3c7d328565587bb7b0454bbee02e2affected90b509b39ac9b09be88eb641c7a3abd8de06b698 to < 625b70d31dd4df4b96b3ddcbe251debb33bd67f5affected90b509b39ac9b09be88eb641c7a3abd8de06b698 to < 51fe0a470543f345e3c62b6798929de3ddcedc1daffected
Linux Linux
Default version status: affected
5.2affected0 to < 5.2unaffected5.4.257 to ≤ 5.4.*unaffected5.10.195 to ≤ 5.10.*unaffected5.15.132 to ≤ 5.15.*unaffected6.1.54 to ≤ 6.1.*unaffected6.5.4 to ≤ 6.5.*unaffected6.6 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/ba6673824efa3dc198b04a54e69dce480066d7d9 ↗
- https://git.kernel.org/stable/c/61054a8ddb176b155a8f2bacdfefb3727187f5d9 ↗
- https://git.kernel.org/stable/c/5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8 ↗
- https://git.kernel.org/stable/c/349638f7e5d3c7d328565587bb7b0454bbee02e2 ↗
- https://git.kernel.org/stable/c/625b70d31dd4df4b96b3ddcbe251debb33bd67f5 ↗
- https://git.kernel.org/stable/c/51fe0a470543f345e3c62b6798929de3ddcedc1d ↗