In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix a buffer overflow in otx2setrxfh_context()
This function is called from ethtoolsetrxfh() and "*rss_context" comes from the user. Add some bounds checking to prevent memory corruption.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47148.json"
[
{
"events": [
{
"introduced": "5.12"
},
{
"fixed": "5.12.9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc3"
}
]
}
]