CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
AI Score
Confidence
Low
EPSS
Percentile
13.0%
In the Linux kernel, the following vulnerability has been resolved:
tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
Assuming the following:
Fix this by changing gsm->count to gsm->len comparison from equal to less
than. Also add upper limit checks against the constant MAX_MRU in
gsm0_receive() and gsm1_receive() to harden against memory corruption of
gsm->len and gsm->mru.
All other checks remain as we still need to limit the data according to the
user configuration and actual payload size.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/tty/n_gsm.c"
],
"versions": [
{
"version": "e1eaea46bb40",
"lessThan": "9513d4148950",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "b229bc6c6ea9",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "0fb736c9931e",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "4c267110fc11",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "46f52c89a7e7",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "774d83b008ec",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "f126ce7305fe",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "b890d45aaf02",
"status": "affected",
"versionType": "git"
},
{
"version": "e1eaea46bb40",
"lessThan": "47388e807f85",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/tty/n_gsm.c"
],
"versions": [
{
"version": "2.6.35",
"status": "affected"
},
{
"version": "0",
"lessThan": "2.6.35",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.316",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.278",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.219",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.161",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.1.93",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.6.33",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.8.12",
"lessThanOrEqual": "6.8.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.9.3",
"lessThanOrEqual": "6.9.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.10",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/0fb736c9931e02dbc7d9a75044c8e1c039e50f04
git.kernel.org/stable/c/46f52c89a7e7d2691b97a9728e4591d071ca8abc
git.kernel.org/stable/c/47388e807f85948eefc403a8a5fdc5b406a65d5a
git.kernel.org/stable/c/4c267110fc110390704cc065edb9817fdd10ff54
git.kernel.org/stable/c/774d83b008eccb1c48c14dc5486e7aa255731350
git.kernel.org/stable/c/9513d4148950b05bc99fa7314dc883cc0e1605e5
git.kernel.org/stable/c/b229bc6c6ea9fe459fc3fa94fd0a27a2f32aca56
git.kernel.org/stable/c/b890d45aaf02b564e6cae2d2a590f9649330857d
git.kernel.org/stable/c/f126ce7305fe88f49cdabc6db4168b9318898ea3