Description
In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO_URING_F_SQE128 flag check. This could cause out of boundary memory access. Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return -EINVAL immediately if the flag is not set.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
71f28f3136aff5890cd56de78abc673f8393cad9 to < 4b4dff498f46e9802f71bc84258bf73065f51c6aaffected71f28f3136aff5890cd56de78abc673f8393cad9 to < 31cac6acf77ece488f29fb8f79589d9298e969c8affected71f28f3136aff5890cd56de78abc673f8393cad9 to < dbe8e81a2ec608f87f79a34f6444cd62f6a243bbaffected71f28f3136aff5890cd56de78abc673f8393cad9 to < f75a5555e0049e7857eae25b60aee98b80e287ecaffected71f28f3136aff5890cd56de78abc673f8393cad9 to < 17d33ba7291100008360b5a354962db37ad80684affected71f28f3136aff5890cd56de78abc673f8393cad9 to < da7e4b75e50c087d2031a92f6646eb90f7045a67affected
Linux Linux
Default version status: affected
6.0affected0 to < 6.0unaffected6.1.165 to ≤ 6.1.*unaffected6.6.128 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.14 to ≤ 6.18.*unaffected6.19.4 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a ↗
- https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8 ↗
- https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb ↗
- https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec ↗
- https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684 ↗
- https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67 ↗