Threats tagged 'ghsa-9mvj-23j7-q46q'

A high-severity vulnerability in the Linux kernel's AF_XDP socket subsystem was addressed by SUSE. The flaw involved insufficient validation of userspace-supplied xdp_desc structures, allowing crafted inputs to bypass checks due to integer overflow conditions. This could lead to undefined behavior or queuing of invalid frames for transmission. The fix promotes desc->len to 64-bit and adds explicit overflow checks. No specific affected versions are clearly stated.