296,223
Total vulnerabilities in the database
In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: fix possible overflow in DPE length check
Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read.
Move the wDatagramIndex term to the other side of the inequality.
An existing condition ensures that wDatagramIndex < urb->actual_length.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 6.13 | 6.13.3 |
| linux / linux_kernel | 6.7 | 6.12.14 |
| linux / linux_kernel | 6.5 | 6.6.78 |