Description
In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
286468210d83ce0ca1e37e346ed9f4457a161650 to < 67f34f093c0f7bf33f5b4ae64d3d695a3b978285affected286468210d83ce0ca1e37e346ed9f4457a161650 to < 7b8c7bd2296e95b38a6ff346242356a2e7190239affected286468210d83ce0ca1e37e346ed9f4457a161650 to < cca330c59c54207567a648357835f59df9a286bbaffected286468210d83ce0ca1e37e346ed9f4457a161650 to < 79f988d3ffc1aa778fc5181bdfab312e57956c6baffected286468210d83ce0ca1e37e346ed9f4457a161650 to < 4ee0941da10e8fdcdb34756b877efd3282594c1faffected286468210d83ce0ca1e37e346ed9f4457a161650 to < 1fe60ee709436550f8cfbab01295936b868d5baaaffected286468210d83ce0ca1e37e346ed9f4457a161650 to < 539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41caffected286468210d83ce0ca1e37e346ed9f4457a161650 to < 38762a0763c10c24a4915feee722d7aa6e73eb98affected
Linux Linux
Default version status: affected
2.6.36affected0 to < 2.6.36unaffected4.19.314 to ≤ 4.19.*unaffected5.4.276 to ≤ 5.4.*unaffected5.10.217 to ≤ 5.10.*unaffected5.15.159 to ≤ 5.15.*unaffected6.1.91 to ≤ 6.1.*unaffected6.6.31 to ≤ 6.6.*unaffected6.8.10 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 ↗
- https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 ↗
- https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb ↗
- https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b ↗
- https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f ↗
- https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa ↗
- https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c ↗
- https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html ↗