Description
In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of heap->len to prevent realloc() from copying an extra sizeof(heap) bytes from beyond the allocated region.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0e0ff638400be8f497a35b51a4751fd823f6bd6a to < 5996b2b2dac739f2a27da13de8eee5b85b2550b3affected0e0ff638400be8f497a35b51a4751fd823f6bd6a to < f678c3c336559cf3255a32153e9a17c1be4e7c15affected0e0ff638400be8f497a35b51a4751fd823f6bd6a to < 8019d3dd921f39a237a9fab6d2ce716bfac0f983affected0e0ff638400be8f497a35b51a4751fd823f6bd6a to < 4e6f225aefeb712cdb870176b6621f02cf235b8caffected0e0ff638400be8f497a35b51a4751fd823f6bd6a to < 791f4641142e2aced85de082e5783b4fb0b977c2affected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected6.1.93 to ≤ 6.1.*unaffected6.6.33 to ≤ 6.6.*unaffected6.8.12 to ≤ 6.8.*unaffected6.9.3 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5996b2b2dac739f2a27da13de8eee5b85b2550b3 ↗
- https://git.kernel.org/stable/c/f678c3c336559cf3255a32153e9a17c1be4e7c15 ↗
- https://git.kernel.org/stable/c/8019d3dd921f39a237a9fab6d2ce716bfac0f983 ↗
- https://git.kernel.org/stable/c/4e6f225aefeb712cdb870176b6621f02cf235b8c ↗
- https://git.kernel.org/stable/c/791f4641142e2aced85de082e5783b4fb0b977c2 ↗