In the Linux kernel, the following vulnerability has been resolved:
net: tulip: de4x5: fix the problem that the array ‘lp->phy[8]’ may be out of bound
In line 5001, if all id in the array ‘lp->phy[8]’ is not 0, when the
‘for’ end, the ‘k’ is 8.
At this time, the array ‘lp->phy[8]’ may be out of bound.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/net/ethernet/dec/tulip/de4x5.c"
],
"versions": [
{
"version": "1da177e4c3f4",
"lessThan": "ec5bd0aef1ce",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "142ead3dc704",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "d3dedaa5a601",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "2c1a6a9a011d",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "77ff16690945",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "f059fa40f0fc",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "12f907cb1157",
"status": "affected",
"versionType": "git"
},
{
"version": "1da177e4c3f4",
"lessThan": "61217be886b5",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/net/ethernet/dec/tulip/de4x5.c"
],
"versions": [
{
"version": "4.4.294",
"lessThanOrEqual": "4.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.9.292",
"lessThanOrEqual": "4.9.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.14.257",
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.220",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.164",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.84",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.7",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.16",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/12f907cb11576b8cd0b1d95a16d1f10ed5bb7237
git.kernel.org/stable/c/142ead3dc70411bd5977e8c47a6d8bf22287b3f8
git.kernel.org/stable/c/2c1a6a9a011d622a7c61324a97a49801ba425eff
git.kernel.org/stable/c/61217be886b5f7402843677e4be7e7e83de9cb41
git.kernel.org/stable/c/77ff166909458646e66450e42909e0adacc99049
git.kernel.org/stable/c/d3dedaa5a601107cfedda087209772c76e364d58
git.kernel.org/stable/c/ec5bd0aef1cec96830d0c7e06d3597d9e786cc98
git.kernel.org/stable/c/f059fa40f0fcc6bc7a12e0f2a2504e9a4ff74f1f