Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute length RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute whose children are consumed directly with nla_get_u32(). The top-level policy validates only the container, so it does not establish the fixed shape of each child. Require every child payload to be exactly one u32 before reading it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
3c3c1f1416392382faa0238e76a70d7810aab2ef to < 7828d68ae8cad3463e38def5c91668c84e722596affected3c3c1f1416392382faa0238e76a70d7810aab2ef to < f8e9315236c8b5155158c6955a758e7960b143e6affected3c3c1f1416392382faa0238e76a70d7810aab2ef to < d00b0d808ca706a04bd198827319a4a287eff82aaffected3c3c1f1416392382faa0238e76a70d7810aab2ef to < 0bfa897e3e1a61d172f95675b353168bc9290312affected3c3c1f1416392382faa0238e76a70d7810aab2ef to < c57e238b475e8e1e514499772b8c0db5768be93faffected3c3c1f1416392382faa0238e76a70d7810aab2ef to < 74f49255492a62658f36bf2578d7916f1c6ffad1affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7828d68ae8cad3463e38def5c91668c84e722596 ↗
- https://git.kernel.org/stable/c/f8e9315236c8b5155158c6955a758e7960b143e6 ↗
- https://git.kernel.org/stable/c/d00b0d808ca706a04bd198827319a4a287eff82a ↗
- https://git.kernel.org/stable/c/0bfa897e3e1a61d172f95675b353168bc9290312 ↗
- https://git.kernel.org/stable/c/c57e238b475e8e1e514499772b8c0db5768be93f ↗
- https://git.kernel.org/stable/c/74f49255492a62658f36bf2578d7916f1c6ffad1 ↗