Total vulnerabilities in the database
An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.5 | 5.5.10 |
| linux / linux_kernel | 4.20 | 5.4.26 |
| linux / linux_kernel | 4.16 | 4.19.111 |
| netapp / hci_baseboard_management_controller | h300s | h300s.x |
| netapp / hci_baseboard_management_controller | h500s | h500s.x |
| netapp / hci_baseboard_management_controller | h700s | h700s.x |
| netapp / hci_baseboard_management_controller | h410s | h410s.x |
| netapp / hci_baseboard_management_controller | h410c | h410c.x |
| netapp / hci_baseboard_management_controller | h610c | h610c.x |
| netapp / hci_baseboard_management_controller | h610s | h610s.x |
| netapp / hci_baseboard_management_controller | h615c | h615c.x |
| netapp / aff_baseboard_management_controller | a700s | a700s.x |