PT-2019-4658 · Linux+5 · Linux Kernel+5

Publicado

2019-06-28

·

Atualizado

2023-01-17

·

CVE-2019-15925

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.3
Description The issue is related to a buffer overflow in memory due to an out-of-bounds access in the hclge tm schd mode vnet base cfg function. This could allow an attacker to cause a denial of service. The function is located in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge tm.c.
Recommendations For Linux kernel versions prior to 5.2.3, update to version 5.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the hclge tm schd mode vnet base cfg function until a patch is available.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALSA-2020:4431
ALT-PU-2019-2339
ALT-PU-2019-2366
ALT-PU-2019-2377
ALT-PU-2019-2401
ALT-PU-2019-2465
ALT-PU-2019-2746
ALT-PU-2020-1024
BDU:2020-00846
CESA-2020_4431
CESA-2020_4609
CVE-2019-15925
RHSA-2020:4431
RHSA-2020:4609
RHSA-2020_4431
RHSA-2020_4609
USN-4147-1

Produtos afetados

Alt Linux
Almalinux
Centos
Linux Kernel
Red Hat
Ubuntu