Threats tagged 'ghsa-3fjr-pmvp-g6q5'

A high-severity vulnerability in the Linux kernel's KVM arm64 implementation was resolved. The issue involved insufficient verification of an untrusted offset in the FF-A memory share, which could lead to out-of-bounds (OOB) access in the hypervisor. Specifically, if the host kernel set a large enough offset value near the upper limit of a 32-bit unsigned integer range, it could cause memory access beyond intended boundaries. This vulnerability has been addressed by adding proper offset checks to prevent such OOB access.