Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Several corner cases, especially important on 32 bits: - umem->iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the length is not too large for the iova - Check that lengths > 4G don't overflow the GENMASK
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a40c20dabdf9045270767c75918feb67f0727c89 to < 3014da7587ce006cd08004fd6b257626b314e0a3affecteda40c20dabdf9045270767c75918feb67f0727c89 to < ddccf6cc3861de2fe60986933bead79220e0d797affecteda40c20dabdf9045270767c75918feb67f0727c89 to < e9bbb5f5349ef560ff6f0395564f04c3aa664559affecteda40c20dabdf9045270767c75918feb67f0727c89 to < ae3cf7d2c4d506c5c91746321644e1a08d989e2aaffecteda40c20dabdf9045270767c75918feb67f0727c89 to < 5fc5b73109540809b094710fac44da81dd8a3ff8affecteda40c20dabdf9045270767c75918feb67f0727c89 to < 09ea6837a0434fb4db99528a5055b6d822135dcfaffected85e40ba1c4a5246b35e91c2ed69d4680426904d7affected59f07434b297e2268f5d5c567db5b09145245cf1affected488229b7729d7becf4c39c5e74fb709fb35115c2affected5.4.73 to < 5.5affected5.8.17 to < 5.9affected5.9.2 to < 5.10affected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3014da7587ce006cd08004fd6b257626b314e0a3 ↗
- https://git.kernel.org/stable/c/ddccf6cc3861de2fe60986933bead79220e0d797 ↗
- https://git.kernel.org/stable/c/e9bbb5f5349ef560ff6f0395564f04c3aa664559 ↗
- https://git.kernel.org/stable/c/ae3cf7d2c4d506c5c91746321644e1a08d989e2a ↗
- https://git.kernel.org/stable/c/5fc5b73109540809b094710fac44da81dd8a3ff8 ↗
- https://git.kernel.org/stable/c/09ea6837a0434fb4db99528a5055b6d822135dcf ↗