In the Linux kernel, the following vulnerability has been resolved:
enic: Validate length of nl attributes in enicsetvf_port
enicsetvfport assumes that the nl attribute IFLAPORTPROFILE is of length PORTPROFILEMAX and that the nl attributes IFLAPORTINSTANCEUUID, IFLAPORTHOSTUUID are of length PORTUUIDMAX. These attributes are validated (in the function dosetlink in rtnetlink.c) using the nlapolicy iflaportpolicy. The policy defines IFLAPORTPROFILE as NLASTRING, IFLAPORTINSTANCEUUID as NLABINARY and IFLAPORTHOSTUUID as NLASTRING. That means that the length validation using the policy is for the max size of the attributes and not on exact size so the length of these attributes might be less than the sizes that enicsetvfport expects. This might cause an out of bands read access in the memcpys of the data of these attributes in enicsetvfport.
[
{
"digest": {
"length": 1911.0,
"function_hash": "66745646155476972711928137149806864599"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c0d36972edbe56fcf98899622d9b90ac9965227",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-21aa334e",
"signature_type": "Function"
},
{
"digest": {
"length": 1958.0,
"function_hash": "203300355461580502130320219035089938220"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8021b94b0412c37bcc79027c2e382086b6ce449",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-222e442f",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7077c22f84f41974a711604a42fd0e0684232ee5",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-22bf06ee",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6638e955ca00c489894789492776842e102af9c",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-4c3b95b4",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aee1955a1509a921c05c70dad5d6fc8563dfcb31",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-6c5a8192",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c0d36972edbe56fcf98899622d9b90ac9965227",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-6f398d32",
"signature_type": "Line"
},
{
"digest": {
"length": 1958.0,
"function_hash": "203300355461580502130320219035089938220"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6638e955ca00c489894789492776842e102af9c",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-73d27801",
"signature_type": "Function"
},
{
"digest": {
"length": 1911.0,
"function_hash": "66745646155476972711928137149806864599"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25571a12fbc8a1283bd8380d461267956fd426f7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-7a7a5bf7",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca63fb7af9d3e531aa25f7ae187bfc6c7166ec2d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-8a889e90",
"signature_type": "Line"
},
{
"digest": {
"length": 1958.0,
"function_hash": "203300355461580502130320219035089938220"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7077c22f84f41974a711604a42fd0e0684232ee5",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-c9ee578e",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8021b94b0412c37bcc79027c2e382086b6ce449",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-d54b61cd",
"signature_type": "Line"
},
{
"digest": {
"length": 1911.0,
"function_hash": "66745646155476972711928137149806864599"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca63fb7af9d3e531aa25f7ae187bfc6c7166ec2d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-ee9b8829",
"signature_type": "Function"
},
{
"digest": {
"length": 1958.0,
"function_hash": "203300355461580502130320219035089938220"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aee1955a1509a921c05c70dad5d6fc8563dfcb31",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "enic_set_vf_port",
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-f7156fc9",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"229413666380326805447331439790262735062",
"64460050734076918454250526294773526081",
"182462515880902788497070472489277176000",
"171807674955832685224587360976971370332",
"30773061468957634769436435189482753070",
"81991548687289885051775411227554094106",
"168996780610464573563641959695975939183",
"112681901059701266396849565858854782829",
"73469672201071779801385208050614640957",
"79126790340664523234108264741015115849",
"243621702996775664273620115986846182509",
"199046867560748179717284843678433807312",
"126470687097615227789590255044896621203",
"187834919723568614924800248863142229046"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25571a12fbc8a1283bd8380d461267956fd426f7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/cisco/enic/enic_main.c"
},
"id": "CVE-2024-38659-fe0df4b9",
"signature_type": "Line"
}
]