References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

In the Linux kernel, the following vulnerability has been resolved:

net: libwx: fix the using of Rx buffer DMA

The wx_rx_buffer structure contained two DMA address fields: 'dma' and
'page_dma'. However, only 'page_dma' was actually initialized and used
to program the Rx descriptor. But 'dma' was uninitialized and used in
some paths.

This could lead to undefined behavior, including DMA errors or
use-after-free, if the uninitialized 'dma' was used. Althrough such
error has not yet occurred, it is worth fixing in the code.

https://git.kernel.org/stable/c/027701180a7bcb64c42eab291133ef0c87b5b6c5

https://git.kernel.org/stable/c/05c37b574997892a40a0e9b9b88a481566b2367d

https://git.kernel.org/stable/c/5fd77cc6bd9b368431a815a780e407b7781bcca0

https://git.kernel.org/stable/c/ba7c793f96c1c2b944bb6f423d7243f3afc30fe9