Popis
In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() accepts a plain int node_id and forwards it through the entire allocation chain without any bounds checking. Validate node_id before passing it down the allocation chain in arena_alloc_pages().
CVSS 7.8EPSS 0.129%Riziko 0.79
Zobraziť zdroj- Zverejnené
- 2026-06-24 17:17:14
- Dotknuté verzie
- unknown
- Typ
- Jadro
- Vektor
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Operačné systémy
- Linux