qede: fix out-of-bounds check for cqe->len_list[]
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From ecbb12caf399d7cf364b7553ed5aebeaa2f255bc · fixed in 6d203bdd227fca1787f8a80cf84b990936633c5a; From a778912b4a53587ea07d85526d152f85d109cbfe · fixed in bd3a6a083b408e96437dbd86ff543ba9ec3a788b; From f0923011c1261b33a2ac1de349256d39cb750dd0 · fixed in e30af53dca803893a29eb3bbe0539752ba435410; From 917a9d02182ac8b4f25eb47dc02f3ec679608c24 · fixed in 1aacefd074b5dcc99b8dbcd73e1c963ed5010110; From 896f1a2493b59beb2b5ccdf990503dbb16cb2256 · fixed in b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd; From 896f1a2493b59beb2b5ccdf990503dbb16cb2256 · fixed in 6d46ab395803f162cdc50e8d346e5f1a4e766771; From 896f1a2493b59beb2b5ccdf990503dbb16cb2256 · fixed in f9ba47fce5932c15891c89c60e76dfaca919cb8d; From 5.15.197 · fixed in 5.15.212; From 6.1.159 · fixed in 6.1.178; From 6.6.118 · fixed in 6.6.145; From 6.12.60 · fixed in 6.12.97; From 6.17.10 · fixed in 6.18
- Linux Linux
6.18
- KernelLinux
fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.18.0 · fixed in 7.1.5
References 7
git.kernel.org
- stable/c/6d203bdd227fca1787f8a80cf84b990936633c5a
- stable/c/bd3a6a083b408e96437dbd86ff543ba9ec3a788b
- stable/c/e30af53dca803893a29eb3bbe0539752ba435410
- stable/c/1aacefd074b5dcc99b8dbcd73e1c963ed5010110
- stable/c/b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd
- stable/c/6d46ab395803f162cdc50e8d346e5f1a4e766771
- stable/c/f9ba47fce5932c15891c89c60e76dfaca919cb8d