bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

...

kernel: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bondoptionarpiptargetsset In function bondoptionarpiptargetsset, if newval-string is an empty string, newval-string+1 will point to the byte after the string, causing an out-of-bound read. BUG:...

PT-2024-5419

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-rc7 Description The issue is related to an out-of-bounds read in the bond option arp ip targets set function. If newval-string is an empty string, newval-string+1 will point to the byte after the string,...