References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Known Affected Software Configurations Switch to CPE 2.2

Change History

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 6.10.10
     *cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST CWE-129

https://git.kernel.org/stable/c/86db7bfb06704ef17340eeae71c832f21cfce35c No Types Assigned

https://git.kernel.org/stable/c/86db7bfb06704ef17340eeae71c832f21cfce35c Patch

https://git.kernel.org/stable/c/c33a9806dc806bcb4a31dc71fb06979219181ad4 No Types Assigned

https://git.kernel.org/stable/c/c33a9806dc806bcb4a31dc71fb06979219181ad4 Patch

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: void array out of bound when loop tnl_num

When query reg inf of SSU, it loops tnl_num times. However, tnl_num comes
from hardware and the length of array is a fixed value. To void array out
of bound, make sure the loop time is not greater than the length of array

kernel.org https://git.kernel.org/stable/c/86db7bfb06704ef17340eeae71c832f21cfce35c [No types assigned]

kernel.org https://git.kernel.org/stable/c/c33a9806dc806bcb4a31dc71fb06979219181ad4 [No types assigned]