In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID. Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: hns3: añadir validación de ID de VLAN antes de usar Actualmente, el ID de VLAN puede ser usado sin validación cuando se recibe un buzón de configuración de VLAN desde VF. La longitud de vlan_del_fail_bmap es BITS_TO_LONGS(VLAN_N_VID). Puede causar acceso a memoria fuera de límites una vez que el ID de VLAN es mayor o igual que VLAN_N_VID. Por lo tanto, el ID de VLAN necesita ser verificado para asegurar que está dentro del rango de VLAN_N_VID.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-125
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24246ec940> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24246ed640> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a65fe600> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea6e380> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea6f040> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23bea6cf80> | Operating System |
| linux | linux_kernel | 5.3 | <built-in method update of dict object at 0x7d23bea6ce40> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d23a65fefc0> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d23a65ff500> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d23bea6e5c0> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d23a65ffec0> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d24246effc0> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d24246c2c00> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d23bea6ca80> | Operating System |
| linux | linux_kernel | 6.19 | <built-in method update of dict object at 0x7d2424670e80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.3:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:* |