A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize the memory indirectly passed to vduse_vdpa_get_config() returning uninitialized memory from the stack. This could cause undefined behavior or data leaks in Virtio drivers.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.15.73-48.135Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf | Oct 26, 2022 | Sep 1, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-azure-fde-5.15Upgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-riscvUpgrade linux-ibmUpgrade linux-gke-5.15Upgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-kvmUpgrade linux-azureUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-awsUpgrade linux-gcpUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub