Description
In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr to be out of bounds.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 to < 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aedaffected9d2b68cc108db2fdb35022ed2d88cfb305c441a6 to < f55276160ffad3e235b657ee4b7304eb99b90e5caffected9d2b68cc108db2fdb35022ed2d88cfb305c441a6 to < cfbc6e9b84dcc0aa2d65c84ea4745af327763209affected9d2b68cc108db2fdb35022ed2d88cfb305c441a6 to < 1681cc7974a6123f5d5740b03bc11e4784bd2542affected9d2b68cc108db2fdb35022ed2d88cfb305c441a6 to < d22829101ab675607ad6c3d420fb3ab875f46bbbaffected9d2b68cc108db2fdb35022ed2d88cfb305c441a6 to < 555c5475e787802eeae0d2b91c2f66c330db2767affected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed ↗
- https://git.kernel.org/stable/c/f55276160ffad3e235b657ee4b7304eb99b90e5c ↗
- https://git.kernel.org/stable/c/cfbc6e9b84dcc0aa2d65c84ea4745af327763209 ↗
- https://git.kernel.org/stable/c/1681cc7974a6123f5d5740b03bc11e4784bd2542 ↗
- https://git.kernel.org/stable/c/d22829101ab675607ad6c3d420fb3ab875f46bbb ↗
- https://git.kernel.org/stable/c/555c5475e787802eeae0d2b91c2f66c330db2767 ↗