Buffer Overflow

2020-11-0503:16:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

kernel is vulnerable to buffer overflow vulnerability. The vulnerability exists in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in an array containing oversized packet with roo many rx fragments corrupting memory of adjacent pages.

CPENameOperatorVersion
kerneleq4.18.0__147.3.1.el8_1
kerneleq4.18.0__193.12.1.el8_2
kerneleq4.18.0__80.el8
kerneleq4.18.0__193.13.2.el8_2
kerneleq4.18.0__80.7.2.el8_0
kerneleq4.18.0__193.1.2.el8_2
kerneleq4.18.0__80.7.1.el8_0
kerneleq4.18.0__80.1.2.el8_0
kerneleq4.18.0__147.8.1.el8_1
kerneleq4.18.0__193.23.1.el8_2

Name	Operator	Version
kernel	eq	4.18.0__147.3.1.el8_1
kernel	eq	4.18.0__193.12.1.el8_2
kernel	eq	4.18.0__80.el8
kernel	eq	4.18.0__193.13.2.el8_2
kernel	eq	4.18.0__80.7.2.el8_0
kernel	eq	4.18.0__193.1.2.el8_2
kernel	eq	4.18.0__80.7.1.el8_0
kernel	eq	4.18.0__80.1.2.el8_0
kernel	eq	4.18.0__147.8.1.el8_1
kernel	eq	4.18.0__193.23.1.el8_2