Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a single PDE page address (contiguous pages in the case of > PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid memory access after 256K PBL entries in the PDE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0c4dcd602817502bb3dced7a834a13ef717d65a4 to < df6fed0a2a1a5e57f033bca40dc316b18e0d0ce6affected0c4dcd602817502bb3dced7a834a13ef717d65a4 to < de5857fa7bcc9a496a914c7e21390be873109f26affected0c4dcd602817502bb3dced7a834a13ef717d65a4 to < ea701c1849e7250ea41a4f7493e0a5f136c1d47eaffected0c4dcd602817502bb3dced7a834a13ef717d65a4 to < 87cb3b0054e53e0155b630bdf8fb714ded62565faffected0c4dcd602817502bb3dced7a834a13ef717d65a4 to < daac56dd98e1ba814c878ac0acd482a37f2ab94baffected0c4dcd602817502bb3dced7a834a13ef717d65a4 to < 7988bdbbb85ac85a847baf09879edcd0f70521dcaffected
Linux Linux
Default version status: affected
5.7affected0 to < 5.7unaffected5.10.229 to ≤ 5.10.*unaffected5.15.170 to ≤ 5.15.*unaffected6.1.115 to ≤ 6.1.*unaffected6.6.59 to ≤ 6.6.*unaffected6.11.6 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/df6fed0a2a1a5e57f033bca40dc316b18e0d0ce6 ↗
- https://git.kernel.org/stable/c/de5857fa7bcc9a496a914c7e21390be873109f26 ↗
- https://git.kernel.org/stable/c/ea701c1849e7250ea41a4f7493e0a5f136c1d47e ↗
- https://git.kernel.org/stable/c/87cb3b0054e53e0155b630bdf8fb714ded62565f ↗
- https://git.kernel.org/stable/c/daac56dd98e1ba814c878ac0acd482a37f2ab94b ↗
- https://git.kernel.org/stable/c/7988bdbbb85ac85a847baf09879edcd0f70521dc ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗