Description
In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix id_table array not null terminated error Allocate one extra virtio_device_id as null terminator, otherwise vdpa_mgmtdev_get_classes() may iterate multiple times and visit undefined memory.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ffbda8e9df10d1784d5427ec199e7d8308e3763f to < 870d68fe17b5d9032049dcad98b5781a344a8657affectedffbda8e9df10d1784d5427ec199e7d8308e3763f to < c4d64534d4b1c47d2f1ce427497f971ad4735aaeaffectedffbda8e9df10d1784d5427ec199e7d8308e3763f to < 0a886489d274596ad1a80789d3a773503210a615affectedffbda8e9df10d1784d5427ec199e7d8308e3763f to < 4e39ecadf1d2a08187139619f1f314b64ba7d947affected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected6.1.119 to ≤ 6.1.*unaffected6.6.63 to ≤ 6.6.*unaffected6.11.10 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/870d68fe17b5d9032049dcad98b5781a344a8657 ↗
- https://git.kernel.org/stable/c/c4d64534d4b1c47d2f1ce427497f971ad4735aae ↗
- https://git.kernel.org/stable/c/0a886489d274596ad1a80789d3a773503210a615 ↗
- https://git.kernel.org/stable/c/4e39ecadf1d2a08187139619f1f314b64ba7d947 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗