Description
In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow check to ensure that data_offset + data_len + 8 does not wrap, which would enable an OOB read of the USB data buffer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
64e049102d3de3e61409cb6019403a9e689dfda6 to < 2140db1232af04b92faa6c4a2a40df6371ea89ffaffected64e049102d3de3e61409cb6019403a9e689dfda6 to < 8ca3bd404d076495ed0b274b65971c57b6fd5ac0affected64e049102d3de3e61409cb6019403a9e689dfda6 to < f8e6fde5db87f855e99b200e392467274f0eb9d7affected64e049102d3de3e61409cb6019403a9e689dfda6 to < 10a6b99079697c5027b25352e882bdf54fef702aaffected64e049102d3de3e61409cb6019403a9e689dfda6 to < c5398ce6db7647b7004d73a3102ccc25fb4bb596affected64e049102d3de3e61409cb6019403a9e689dfda6 to < e971d956353d382ee2185d71c47b538501a43f76affected64e049102d3de3e61409cb6019403a9e689dfda6 to < be7dc3650f799a253df4edd4fe230fc9ea4be063affected64e049102d3de3e61409cb6019403a9e689dfda6 to < 2ded89ca77fae1da6886fe94831acfe4d6aa80b1affected64e049102d3de3e61409cb6019403a9e689dfda6 to < 965a251f23ff69cfb4486974d4532e9bb551c7fcaffected
Linux Linux
Default version status: affected
2.6.14affected0 to < 2.6.14unaffected5.10.267 to ≤ 5.10.*unaffected5.15.218 to ≤ 5.15.*unaffected6.1.185 to ≤ 6.1.*unaffected6.6.154 to ≤ 6.6.*unaffected6.12.106 to ≤ 6.12.*unaffected6.18.47 to ≤ 6.18.*unaffected7.1.11 to ≤ 7.1.*unaffected7.2.1 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2140db1232af04b92faa6c4a2a40df6371ea89ff ↗
- https://git.kernel.org/stable/c/8ca3bd404d076495ed0b274b65971c57b6fd5ac0 ↗
- https://git.kernel.org/stable/c/f8e6fde5db87f855e99b200e392467274f0eb9d7 ↗
- https://git.kernel.org/stable/c/10a6b99079697c5027b25352e882bdf54fef702a ↗
- https://git.kernel.org/stable/c/c5398ce6db7647b7004d73a3102ccc25fb4bb596 ↗
- https://git.kernel.org/stable/c/e971d956353d382ee2185d71c47b538501a43f76 ↗
- https://git.kernel.org/stable/c/be7dc3650f799a253df4edd4fe230fc9ea4be063 ↗
- https://git.kernel.org/stable/c/2ded89ca77fae1da6886fe94831acfe4d6aa80b1 ↗
- https://git.kernel.org/stable/c/965a251f23ff69cfb4486974d4532e9bb551c7fc ↗