In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging interface supported…
High CVSS 7.1
Summary
In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging interface supported by the i40e driver since its early days by commit 02e9c290814c ("i40e: debugfs interface"). Both of these debugfs files provide a read handler which is mostly useless, and which is implemented with questionable logic. They both use a static 256 byte buffer which is initialized to the empty string.…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/70d3dad7d5ad077965d7a63eed1942b7ba49bfb4 Patch
- https://git.kernel.org/stable/c/7d190963b80f4cd99d7008615600aa7cc993c6ba Patch
- https://git.kernel.org/stable/c/9fcdb1c3c4ba134434694c001dbff343f1ffa319 Patch
- https://git.kernel.org/stable/c/ef40d9411469306e524e7887c51b709377e6ef65
Timeline
- nvd_ingest NVD