Threats tagged 'ghsa-wv45-qhgq-9h5f'

A vulnerability in the Linux kernel RDMA subsystem (rtrs-srv) involves an integer underflow in process_read and process_write functions. The issue arises because usr_len, read from a network message, is not validated against the offset value before being used in a calculation, allowing a malicious RDMA client to cause an integer underflow. This leads to an out-of-bounds memory access. The vulnerability has been resolved by adding validation to ensure usr_len is not greater than the offset before proceeding.