Description
In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry() is called with hash >= ppe_num_entries/2, it writes beyond the allocated buffer, causing heap buffer overflow and potential kernel crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
56b99327a451917f1c17f85fc33ea8293c08a9ee to < 112b5eff24e044561ee9599a0d34e0fcea1df4e0affected6d5b601d52a27aafff555b480e538507901c672c to < 9f7cd1e26d2f1766438edc9b9254f2c618f9ae98affected6d5b601d52a27aafff555b480e538507901c672c to < 5c121ee635680c93d7074becf14cfbaac140f80daffected6.18.33 to < 6.18.40affected
Linux Linux
Default version status: affected
6.19affected0 to < 6.19unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected