N/A

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

N/A

整数强制转换错误

Linux kernel 数字错误漏洞

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在数字错误漏洞，该漏洞源于在 openvswitch 内核模块中发现整数强制错误。 给定足够多的操作，在为新流的新操作复制和保留内存时，reserve_sfa_size() 函数不会按预期返回 -EMSGSIZE，这可能会导致越界写入访问。 此漏洞允许本地用户崩溃或可能提升他们在系统上的权限。

N/A

N/A