Non notée
CVE-2022-2308 A flaw was found in vDPA with VDUSE backend
Description
A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize the memory indirectly passed to vduse_vdpa_get_config() returning uninitialized memory from the stack. This could cause undefined behavior or data leaks in Virtio drivers.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux kernel | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux kernel
Les 47 CVE de Linux kernel →
CVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8
5.5
Moyenne
CVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
7.1
Élevée
CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as…
Non notée
CVE-2023-1078
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol
7.8
Élevée