Description
In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in event_deliver() Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() and used as an index without sanitization. This change ensures that the event index is sanitized to mitigate any possibility of speculative information leaks. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. Only compile tested, no access to HW.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < 58730dfbd4ae01c1b022b0d234a8bf8c02cdfb81affected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < 681967c4ff210e06380acf9b9a1b33ae06e77cbdaffected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < f70ff737346744633e7b655c1fb23e1578491ff3affected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < 95ac3e773a1f8da83c4710a720fbfe80055aafaeaffected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < 95bac1c8bedb362374ea1937b1d3e833e01174eeaffected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < e293c6b38ac9029d76ff0d2a6b2d74131709a9a8affected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < 757804e1c599af5d2a7f864c8e8b2842406ff4bbaffected1d990201f9bb499b7c76ab00abeb7e803c0bcb2a to < 8003f00d895310d409b2bf9ef907c56b42a4e0f4affected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected4.19.317 to ≤ 4.19.*unaffected5.4.279 to ≤ 5.4.*unaffected5.10.221 to ≤ 5.10.*unaffected5.15.162 to ≤ 5.15.*unaffected6.1.95 to ≤ 6.1.*unaffected6.6.35 to ≤ 6.6.*unaffected6.9.6 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/58730dfbd4ae01c1b022b0d234a8bf8c02cdfb81 ↗
- https://git.kernel.org/stable/c/681967c4ff210e06380acf9b9a1b33ae06e77cbd ↗
- https://git.kernel.org/stable/c/f70ff737346744633e7b655c1fb23e1578491ff3 ↗
- https://git.kernel.org/stable/c/95ac3e773a1f8da83c4710a720fbfe80055aafae ↗
- https://git.kernel.org/stable/c/95bac1c8bedb362374ea1937b1d3e833e01174ee ↗
- https://git.kernel.org/stable/c/e293c6b38ac9029d76ff0d2a6b2d74131709a9a8 ↗
- https://git.kernel.org/stable/c/757804e1c599af5d2a7f864c8e8b2842406ff4bb ↗
- https://git.kernel.org/stable/c/8003f00d895310d409b2bf9ef907c56b42a4e0f4 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗