kernel: In pfkey_dump() dplen and splen can both be specified to access the xfrm_address_t structure out of bounds

A flaw was found in the way the Linux kernel's pfkeydump function trusted the provided filter size parameters. A local, sufficiently privileged user could use this flaw to leak information from the kernel...

PT-2021-3402

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out-of-bounds read in the pfkey dump function of af key.c due to a missing bounds check. This could lead to local information disclosure in...