Threats tagged 'ghsa-hprw-93rc-4v5g'

A vulnerability in the Linux kernel's vdpa_sim_blk component allows out-of-range sector start requests to bypass validation, leading to out-of-bounds memory access. This occurs because the function vdpasim_blk_check_range() logs invalid start sectors but continues processing, causing an unsigned capacity subtraction underflow. This flaw affects three request paths that perform out-of-bounds reads or writes, potentially impacting data integrity and system stability.