Description
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To address this, introduce an upper boundary check for both Tx and Rx queue lengths. The maximum number of descriptors supported by the hardware is 8k-32. Additionally, enforce alignment constraints: Tx rings must be a multiple of 8, and Rx rings must be a multiple of 32.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < 0543d40d6513cdf1c7882811086e59a6455dfe97affected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < 7d749e38dd2b7e8a80da2ca30c93e09de95bfcf9affected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < 45a7527cd7da4cdcf3b06b5c0cb1cae30b5a5985affected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < d3b0d3f8d11fa957171fbb186e53998361a88d4eaffected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < c0c83f4cd074b75cecef107bfc349be7d516c9c4affected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < 05fe81fb9db20464fa532a3835dc8300d68a2f84affected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < afec12adab55d10708179a64d95d650741e60fe0affected5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to < 55d225670def06b01af2e7a5e0446fbe946289e8affected
Linux Linux
Default version status: affected
3.12affected0 to < 3.12unaffected5.4.300 to ≤ 5.4.*unaffected5.10.245 to ≤ 5.10.*unaffected5.15.194 to ≤ 5.15.*unaffected6.1.155 to ≤ 6.1.*unaffected6.6.109 to ≤ 6.6.*unaffected6.12.50 to ≤ 6.12.*unaffected6.16.10 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0543d40d6513cdf1c7882811086e59a6455dfe97 ↗
- https://git.kernel.org/stable/c/7d749e38dd2b7e8a80da2ca30c93e09de95bfcf9 ↗
- https://git.kernel.org/stable/c/45a7527cd7da4cdcf3b06b5c0cb1cae30b5a5985 ↗
- https://git.kernel.org/stable/c/d3b0d3f8d11fa957171fbb186e53998361a88d4e ↗
- https://git.kernel.org/stable/c/c0c83f4cd074b75cecef107bfc349be7d516c9c4 ↗
- https://git.kernel.org/stable/c/05fe81fb9db20464fa532a3835dc8300d68a2f84 ↗
- https://git.kernel.org/stable/c/afec12adab55d10708179a64d95d650741e60fe0 ↗
- https://git.kernel.org/stable/c/55d225670def06b01af2e7a5e0446fbe946289e8 ↗