Threats tagged 'ghsa-f67x-rg3m-rrxf'

A buffer overflow vulnerability in the Linux kernel's hinic network driver was resolved. The issue arises because the check_mbox_seq_id_and_seg_len() function allows the last mailbox segment to carry a payload that overflows the receive buffer by 16 bytes. This can lead to a heap buffer overflow. The hinic3 driver already implements a fix by rejecting oversized last segments, and this fix was applied to the hinic driver as well.