Total vulnerabilities in the database
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.18.139 | 3.19 |
| linux / linux_kernel | 4.4.179 | 4.5 |
| linux / linux_kernel | 4.9.169 | 4.9.312 |
| linux / linux_kernel | 4.14.112 | 4.14.277 |
| linux / linux_kernel | 4.19.35 | 4.19.240 |
| linux / linux_kernel | 5.0.8 | 5.4.191 |
| linux / linux_kernel | 5.5 | 5.10.113 |
| linux / linux_kernel | 5.11 | 5.15.36 |
| linux / linux_kernel | 5.16 | 5.17.5 |
| redhat / enterprise_linux | 8.0 | 8.0.x |
| redhat / enterprise_linux | 9.0 | 9.0.x |