PT-2022-6286

Name of the Vulnerable Software and Affected Versions Linux kernel with VDUSE backend affected versions not specified Description A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the...

CVE-2022-2308

A flaw was found in the Linux kernel in vDPA with VDUSE backend. There were no checks in VDUSE kernel driver to ensure the size of the device config space was in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers did not...

PT-2021-27200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.10 Description The issue is related to a memory corruption problem in the vduse dev ioctl function. This problem was introduced in version v5.15 and fixed in version v5.15.11. The actual impact and...

PT-2024-11499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the vduse function in the Linux kernel, specifically with the get config function. It checks the len variable but not the offset variable, which could result in a...

PT-2021-8183

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory corruption vulnerability in the vduse dev ioctl function. The "config.offset" comes from the user and needs to be checked to prevent it from being out of...