CVE-2023-52474

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests hfi1 user SDMA request processing has two bugs that can cause data corruption for user SDMA requests that have multiple payload iovecs where an iovec other than the tail iovec does not run up to the page boundary for the buffer pointed to by that iovec.a Here are the specific bugs: 1. user_sdma_txadd() does not use struct user_sdma_iovec->iov.iov_len. Rather, user_sdma_txadd() will add up to PAGE_SIZE bytes from iovec to the packet, even if some of thos...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 7724105686e718ac476a6ad3304fea2fbcfcffde < 9c4c6512d7330b743c4ffd18bd999a86ca26db0d, >= 7724105686e718ac476a6ad3304fea2fbcfcffde < a2bd706ab63509793b5cd5065e685b7ef5cba678, >= 7724105686e718ac476a6ad3304fea2fbcfcffde < dce59b5443700fbd0d2433ec6e4d4cf063448844, >= 7724105686e718ac476a6ad3304fea2fbcfcffde < c76cb8f4bdf26d04cfa5485a93ce297dba5e6a80, >= 7724105686e718ac476a6ad3304fea2fbcfcffde < 7e6010f79b58f45b204cf18aa58f4b73c3f30adc, >= 7724105686e718ac476a6ad3304fea2fbcfcffde < 00cbce5cbf88459cd1aa1d60d0f1df15477df127, >= 4.3, >= 4.3.0 < 5.10.180, >= 5.11.0 < 5.15.111, >= 5.16.0 < 6.1.28, >= 6.2.0 < 6.2.15, >= 6.3.0 < 6.3.2

Fixed versions

5.10.180, 5.15.111, 6.1.28, 6.2.15, 6.3.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Not available