Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These attributes are evaluated as c-string (passed to strcmp), but NLA_STRING doesn't check for the presence of a \0 terminator. Either this needs to switch to nla_strcmp() and needs to adjust printf fmt specifier to not use plain %s, or this needs to use NLA_NUL_STRING. As the code has been this way for long time, it seems to me that userspace does include the terminating nul, even tough its not enforced so far, and thus NLA_NUL_STRING use is the simpler solution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
30dc5e63d6a5ad24894b5512d10b228d73645a44 to < fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdfaffected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < 87111356d58d86edb221ba144d261ed83a5b8bbeaffected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < abda65bdd13084c771842adaac1f652d0660dd82affected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < 137b5918931d4d05aa8ea8d3adf67f7224eef63caffected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < 5877c043398d5fa0e93919a3d837e5cd7a98a961affected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < f2c7b39dde2e61df8157066969cc2a408cd3dcd9affected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < c26a0052cceed4c4d380ee5808b699f937fb58d8affected30dc5e63d6a5ad24894b5512d10b228d73645a44 to < 6ed3d14fc45d3da6025e7fe4a6a09066856698e2affected
Linux Linux
Default version status: affected
3.16affected0 to < 3.16unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.141 to ≤ 6.6.*unaffected6.12.91 to ≤ 6.12.*unaffected6.18.33 to ≤ 6.18.*unaffected7.0.10 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdf ↗
- https://git.kernel.org/stable/c/87111356d58d86edb221ba144d261ed83a5b8bbe ↗
- https://git.kernel.org/stable/c/abda65bdd13084c771842adaac1f652d0660dd82 ↗
- https://git.kernel.org/stable/c/137b5918931d4d05aa8ea8d3adf67f7224eef63c ↗
- https://git.kernel.org/stable/c/5877c043398d5fa0e93919a3d837e5cd7a98a961 ↗
- https://git.kernel.org/stable/c/f2c7b39dde2e61df8157066969cc2a408cd3dcd9 ↗
- https://git.kernel.org/stable/c/c26a0052cceed4c4d380ee5808b699f937fb58d8 ↗
- https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2 ↗