Threats tagged 'ghsa-534x-f2qc-fghv'

A vulnerability in the Linux kernel's network subsystem involving the dev_validate_header() function was resolved. The issue arises when CAP_SYS_RAWIO holders trigger zero-padding of short link layer headers, potentially causing an out-of-bounds write if the device's hard_header_len increases concurrently. This vulnerability affects variable length Layer 2 protocols and could lead to memory corruption. The problematic code path has been removed, eliminating the memory safety risk. The vulnerability has a CVSS score of 7.8 and is considered medium severity. Multiple specific Linux kernel versions are affected. A patch is available to address this issue.