High · published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: Add validation for used length
This adds validation for used length (might come
from an untrusted device) to avoid data corruption
or loss.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 5.4.293 | 5.4.293 |
| linux/linux_kernel | ≥ 5.5, < 5.10.51 | 5.10.51 |
| linux/linux_kernel | ≥ 5.11, < 5.12.18 | 5.12.18 |
| linux/linux_kernel | ≥ 5.13, < 5.13.3 | 5.13.3 |