CVE-2023-52762

virtio-blk: fix implicit overflow on virtio_max_dma_size

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

virtio-blk: fix implicit overflow on virtio_max_dma_size

The following codes have an implicit conversion from size_t to u32:

(u32)max_size = (size_t)virtio_max_dma_size(vdev);

This may lead overflow, Ex (size_t)4G -> (u32)0. Once

virtio_max_dma_size() has a larger size than U32_MAX, use U32_MAX

instead.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Published
2024-05-21T15:30Z
EPSS history
Timeline
  • 21 MAY 15:30Z
    virtio-blk: fix implicit overflow on virtio_max_dma_size
    cvelistv5