Description
In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < a631f82f89c76084ad5b2b9c043d3b391ffa56d8affectedca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < d2568e64d01f480200063fadd67d6938f676c66faffectedca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < 2e276b14b6d378372bf0152df89286cbe7632fb0affectedca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < 6080189291d958604dcefe513a13900835ac982faffectedca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < 6d13eaa13341a8f80aaf86f78591e1b1d393711daffectedca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < 282c5214ca4eb3799158c76782646e86d2945d1baffectedca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to < 2e2a83b4998af4384e677d3b2ac08565274279bfaffected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.217 to ≤ 5.15.*unaffected6.1.184 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a631f82f89c76084ad5b2b9c043d3b391ffa56d8 ↗
- https://git.kernel.org/stable/c/d2568e64d01f480200063fadd67d6938f676c66f ↗
- https://git.kernel.org/stable/c/2e276b14b6d378372bf0152df89286cbe7632fb0 ↗
- https://git.kernel.org/stable/c/6080189291d958604dcefe513a13900835ac982f ↗
- https://git.kernel.org/stable/c/6d13eaa13341a8f80aaf86f78591e1b1d393711d ↗
- https://git.kernel.org/stable/c/282c5214ca4eb3799158c76782646e86d2945d1b ↗
- https://git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bf ↗