SB2019072805 - Denial of service in Linux kernel

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2010-5332)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in drivers/net/mlx4/port.c when searching for a free entry in either mlx4_register_vlan() or mlx4_register_mac(), and there is no free entry. The loop terminates without updating the local variable free thus causing out of array bounds access. A local user can perform denial of service attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0926f91083f34d047abc74f1ca4fa6a9c161f7db
• https://github.com/torvalds/linux/commit/0926f91083f34d047abc74f1ca4fa6a9c161f7db
• https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37