Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel Broadcom 5820 Cryptonet驱动整数溢出漏洞
Vulnerability Description
Linux是一款开放源代码操作系统。 Linux Kernel Broadcom 5820 Cryptonet驱动存在一个整数溢出问题，本地攻击者可以利用这个漏洞对系统进行拒绝服务攻击或提升权限。 此驱动程序包含ubsec_ioctl()函数用于设置驱动的操作参数，函数接收用户提供数据并拷贝到内核空间。当拷贝数据时，用户提供的长度值用于一个计算操作，但由于对数据缺少充分检查，当分配缓冲区空间时此计算可导致整数溢出。 利用这个漏洞可导致系统崩溃或可能以内核上下文执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A