CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
Low
EPSS
Percentile
5.1%
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
The in_token->pages[] array is not NULL terminated. This results in
the following KASAN splat:
KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | 6.10.0 | cpe:2.3:o:linux:linux_kernel:6.10.0:rc1:*:*:*:*:*:* |
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"net/sunrpc/auth_gss/svcauth_gss.c"
],
"versions": [
{
"version": "ab8466d4e268",
"lessThan": "57ff6c0a1759",
"status": "affected",
"versionType": "git"
},
{
"version": "4420b73c7f26",
"lessThan": "6ed45d20d300",
"status": "affected",
"versionType": "git"
},
{
"version": "f148a95f68c6",
"lessThan": "4cefcd0af745",
"status": "affected",
"versionType": "git"
},
{
"version": "fe0b474974fe",
"lessThan": "b4878ea99f2b",
"status": "affected",
"versionType": "git"
},
{
"version": "879fe60fccd5",
"lessThan": "f9977e4e0cd9",
"status": "affected",
"versionType": "git"
},
{
"version": "c1d8c429e4d2",
"lessThan": "af628d43a822",
"status": "affected",
"versionType": "git"
},
{
"version": "8ca148915670",
"lessThan": "0a1cb0c6102b",
"status": "affected",
"versionType": "git"
},
{
"version": "bafa6b4d95d9",
"lessThan": "4a77c3dead97",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"net/sunrpc/auth_gss/svcauth_gss.c"
],
"versions": [
{
"version": "6.9.3",
"lessThan": "6.9.4",
"status": "affected",
"versionType": "custom"
}
]
}
]
git.kernel.org/stable/c/0a1cb0c6102bb4fd310243588d39461da49497ad
git.kernel.org/stable/c/4a77c3dead97339478c7422eb07bf4bf63577008
git.kernel.org/stable/c/4cefcd0af7458bdeff56a9d8dfc6868ce23d128a
git.kernel.org/stable/c/57ff6c0a175930856213b2aa39f8c845a53e5b1c
git.kernel.org/stable/c/6ed45d20d30005bed94c8c527ce51d5ad8121018
git.kernel.org/stable/c/af628d43a822b78ad8d4a58d8259f8bf8bc71115
git.kernel.org/stable/c/b4878ea99f2b40ef1925720b1b4ca7f4af1ba785
git.kernel.org/stable/c/f9977e4e0cd98a5f06f2492b4f3547db58deabf5