CVE-2024-53110

CVE-2024-53110 (Linux kernel) : The IBM security bulletin confirms a fix for vp_vdpa where an id_table lacked a null terminator, risking visitation of undefined memory. The patch allocates one extra virtio_device_id as a null terminator to prevent vdpa_mgmtdev_get_classes() from iterating into in...

CVE-2024-53110 vp_vdpa: fix id_table array not null terminated error

In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...