In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read. Move the wDatagramIndex term to the other side of the inequality. An existing condition ensures that wDatagramIndex < urb->actual_length.
Product | Vendor | Version |
---|---|---|
Linux | Linux | < 32d988f48ed287e676a29a15ac30701c35849aec |
Linux | Linux | <= 3.4.9 |