Description
In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6e3f264560099869f68830cb14b3b3e71e5ac76a to < f21636f24b6786c8b13f1af4319fa75ffcf17f38affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < 9377cdc118cf327248f1a9dde7b87de067681dc9affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < d19a8650fd3d7aed8d1af1d9a77f979a8430eba1affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < ed81d82bb6e9df3a137f2c343ed689e6c68268efaffected6e3f264560099869f68830cb14b3b3e71e5ac76a to < 92340e6c5122d823ad064984ef7513eba9204048affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < f65ce06387f8c1fb54bd59e18a8428248ec68eafaffected6e3f264560099869f68830cb14b3b3e71e5ac76a to < 6bcb8a5b70b80143db9bf12dfa7d53636f824d53affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < 1485932496a1b025235af8aa1e21988d6b7ccd54affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < c981c32c38af80737a2fedc16e270546d139ccddaffected6e3f264560099869f68830cb14b3b3e71e5ac76a to < a20fcaa230f7472456d12cf761ed13938e320ac3affected6e3f264560099869f68830cb14b3b3e71e5ac76a to < 665cfd1083866f87301bbd232cb8ba48dcf4acceaffected6e3f264560099869f68830cb14b3b3e71e5ac76a to < ce9ff21ea89d191e477a02ad7eabf4f996b80a69affected
Linux Linux
Default version status: affected
4.1affected0 to < 4.1unaffected5.4.290 to ≤ 5.4.*unaffected5.4.291 to ≤ 5.4.*unaffected5.10.234 to ≤ 5.10.*unaffected5.10.235 to ≤ 5.10.*unaffected5.15.178 to ≤ 5.15.*unaffected5.15.179 to ≤ 5.15.*unaffected6.1.128 to ≤ 6.1.*unaffected6.1.129 to ≤ 6.1.*unaffected6.6.75 to ≤ 6.6.*unaffected6.12.12 to ≤ 6.12.*unaffected6.13.1 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f21636f24b6786c8b13f1af4319fa75ffcf17f38 ↗
- https://git.kernel.org/stable/c/9377cdc118cf327248f1a9dde7b87de067681dc9 ↗
- https://git.kernel.org/stable/c/d19a8650fd3d7aed8d1af1d9a77f979a8430eba1 ↗
- https://git.kernel.org/stable/c/ed81d82bb6e9df3a137f2c343ed689e6c68268ef ↗
- https://git.kernel.org/stable/c/92340e6c5122d823ad064984ef7513eba9204048 ↗
- https://git.kernel.org/stable/c/f65ce06387f8c1fb54bd59e18a8428248ec68eaf ↗
- https://git.kernel.org/stable/c/6bcb8a5b70b80143db9bf12dfa7d53636f824d53 ↗
- https://git.kernel.org/stable/c/1485932496a1b025235af8aa1e21988d6b7ccd54 ↗
- https://git.kernel.org/stable/c/c981c32c38af80737a2fedc16e270546d139ccdd ↗
- https://git.kernel.org/stable/c/a20fcaa230f7472456d12cf761ed13938e320ac3 ↗
- https://git.kernel.org/stable/c/665cfd1083866f87301bbd232cb8ba48dcf4acce ↗
- https://git.kernel.org/stable/c/ce9ff21ea89d191e477a02ad7eabf4f996b80a69 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗