Description
In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system. Replace two other strcpy() with strscpy().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e74a386d70c793ef44678b44b021c99094b28c47 to < 3dbb628cfc592a4148d8136dcda1f706cdcad4f3affectede74a386d70c793ef44678b44b021c99094b28c47 to < 48033a89356b8ae21a94db70c79bb6fcc91a23c2affectede74a386d70c793ef44678b44b021c99094b28c47 to < 4ab2977323d5f068a872126f7818d1aeb9e9ca0daffectede74a386d70c793ef44678b44b021c99094b28c47 to < bee1459e57f2e0bd240c62f35c0a284291e27971affectede74a386d70c793ef44678b44b021c99094b28c47 to < 81c600c26302a27852ed8b19c5f2f647ea3555c9affected
Linux Linux
Default version status: affected
4.6affected0 to < 4.6unaffected6.6.160 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3dbb628cfc592a4148d8136dcda1f706cdcad4f3 ↗
- https://git.kernel.org/stable/c/48033a89356b8ae21a94db70c79bb6fcc91a23c2 ↗
- https://git.kernel.org/stable/c/4ab2977323d5f068a872126f7818d1aeb9e9ca0d ↗
- https://git.kernel.org/stable/c/bee1459e57f2e0bd240c62f35c0a284291e27971 ↗
- https://git.kernel.org/stable/c/81c600c26302a27852ed8b19c5f2f647ea3555c9 ↗