The vulnerability of the uverbs_request_next_ptr() function in the driver (drivers/infiniband/core/uverbs_cmd.c) of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the uverbsrequestnextptr function in the driver drivers/infiniband/core/uverbscmd.c of the Linux kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevention of integer overflow issues In the expression “cmd.wqesize cmd.wrcount”, both variables are u32 values provided by the user. This multiplication can lead to integer wrapping. We then pass the result to...