Description
In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1cab775c3e75f1250c965feafd061d696df36e53 to < 2b759f78b83221f4a1cae3aeb20b500e375f3ee6affected1cab775c3e75f1250c965feafd061d696df36e53 to < d64148a10a85952352de6091ceed99fb9ce2d3eeaffected1cab775c3e75f1250c965feafd061d696df36e53 to < e53ca458f543aa352d09b484550de173cb9085c2affected1cab775c3e75f1250c965feafd061d696df36e53 to < 4422f452d028850b9cc4fd8f1cf45a8ff91855ebaffected1cab775c3e75f1250c965feafd061d696df36e53 to < de8d88b68d0cfd41152a7a63d6aec0ed3e1b837aaffected1cab775c3e75f1250c965feafd061d696df36e53 to < dd352107f22bfbecbbf3b74bde14f3f932296309affected1cab775c3e75f1250c965feafd061d696df36e53 to < aeb814484387811b3579d5c78ad4eb301e3bf1c8affected1cab775c3e75f1250c965feafd061d696df36e53 to < bd96a3935e89486304461a21752f824fc25e0f0baffected
Linux Linux
Default version status: affected
3.8affected0 to < 3.8unaffected5.4.291 to ≤ 5.4.*unaffected5.10.235 to ≤ 5.10.*unaffected5.15.179 to ≤ 5.15.*unaffected6.1.129 to ≤ 6.1.*unaffected6.6.76 to ≤ 6.6.*unaffected6.12.13 to ≤ 6.12.*unaffected6.13.2 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2b759f78b83221f4a1cae3aeb20b500e375f3ee6 ↗
- https://git.kernel.org/stable/c/d64148a10a85952352de6091ceed99fb9ce2d3ee ↗
- https://git.kernel.org/stable/c/e53ca458f543aa352d09b484550de173cb9085c2 ↗
- https://git.kernel.org/stable/c/4422f452d028850b9cc4fd8f1cf45a8ff91855eb ↗
- https://git.kernel.org/stable/c/de8d88b68d0cfd41152a7a63d6aec0ed3e1b837a ↗
- https://git.kernel.org/stable/c/dd352107f22bfbecbbf3b74bde14f3f932296309 ↗
- https://git.kernel.org/stable/c/aeb814484387811b3579d5c78ad4eb301e3bf1c8 ↗
- https://git.kernel.org/stable/c/bd96a3935e89486304461a21752f824fc25e0f0b ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗