In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in wwan_rtnl_policy The variable wwan_rtnl_link_ops assign a *bigger* maxtype which leads to a global o…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in wwan_rtnl_policy The variable wwan_rtnl_link_ops assign a *bigger* maxtype which leads to a global out-of-bounds read when parsing the netlink attributes. Exactly same bug cause as the oob fixed in commit b33fb5b801c6 ("net: qualcomm: rmnet: fix global oob in rmnet_policy"). ================================================================== BUG: KASAN: global-out-of-bounds in validate_nla lib/nla…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/47dd5447cab8ce30a847a0337d5341ae4c7476a7 Patch
- https://git.kernel.org/stable/c/69076f8435c1c5dae5f814eaf4c361d1f00b22a3 Patch
- https://git.kernel.org/stable/c/9683804e36668f6093fb06e202eed2f188ba437e Patch
- https://git.kernel.org/stable/c/a3ffce63dcc0c208edd4d196e17baed22ebcb643 Patch
- https://git.kernel.org/stable/c/c9a0aed51977198df005d0a623090e38e2d77d7b Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
时间线
- nvd_ingest NVD