Description
In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them. While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bda324fd037a6b0d44da5699574ce741ca161bc4 to < 566899af053246406f2faf931044d2b0af8f34d2affectedbda324fd037a6b0d44da5699574ce741ca161bc4 to < ddb57354634b6ba851b79da45f1de42c646f27d0affectedbda324fd037a6b0d44da5699574ce741ca161bc4 to < 7441d35d14d9a3d66d925d90cb73c75394e6d454affectedbda324fd037a6b0d44da5699574ce741ca161bc4 to < 406db68f9cb976a8ddfafd631197264f2307e9c9affectedbda324fd037a6b0d44da5699574ce741ca161bc4 to < cd025c1e876b4e262e71398236a1550486a73edeaffected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected6.6.160 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/566899af053246406f2faf931044d2b0af8f34d2 ↗
- https://git.kernel.org/stable/c/ddb57354634b6ba851b79da45f1de42c646f27d0 ↗
- https://git.kernel.org/stable/c/7441d35d14d9a3d66d925d90cb73c75394e6d454 ↗
- https://git.kernel.org/stable/c/406db68f9cb976a8ddfafd631197264f2307e9c9 ↗
- https://git.kernel.org/stable/c/cd025c1e876b4e262e71398236a1550486a73ede ↗