In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and re…
中危 CVSS 5.5
摘要
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails, info->pages remains NULL and info->max_pages remains 0. Subsequent calls to module_get_next_page() will attempt to dynamically grow the array by calling module_extend_max_pages(info, 0) since in…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/168072baf9ad516d5a06046514c7fea4c0671990 Patch
- https://git.kernel.org/stable/c/786d2d84416a9a1c1a47b71a68d679d886284be2 Patch
- https://git.kernel.org/stable/c/a82e170637e050a803b4f37542371ef216bf66d2 Patch
- https://git.kernel.org/stable/c/afcc0515bbdd28d509a2b5870faaa89b137f5d53 Patch
- https://git.kernel.org/stable/c/e7da02659c229f73492fb1ed87ceda4090153aaa Patch
- https://git.kernel.org/stable/c/e7f174715f9f0cbcb9e87b52e4fc4ef149baac98 Patch
时间线
- nvd_ingest NVD