In the Linux kernel, the following vulnerability has been resolved:
gve: Account for stopped queues when reading NIC stats
We now account for the fact that the NIC might send us stats for a subset of queues. Without this change, gvegetethtoolstats might make an invalid access on the priv->statsreport->stats array.
[
{
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/google/gve/gve_ethtool.c",
"function": "gve_get_ethtool_stats"
},
"digest": {
"length": 6589.0,
"function_hash": "125711215069335231422637797457250835067"
},
"id": "CVE-2024-42162-2fc9676a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af9bcf910b1f86244f39e15e701b2dc564b469a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/google/gve/gve_ethtool.c",
"function": "gve_get_ethtool_stats"
},
"digest": {
"length": 6536.0,
"function_hash": "143405381802627760621367618413715280101"
},
"id": "CVE-2024-42162-850c4445",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32675d828c8a392e20d5b42375ed112c407e4b62",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/google/gve/gve_ethtool.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173703659493939035011042739750125471749",
"82203272242587580562139951282760096903",
"80861968154780553716155493238464656302",
"321660382737935316095375641266523882512",
"23302503971851096942791446029378548251",
"217405051525270771905813376270283476722",
"325173175465197909420282894291708591022",
"66845582270640151712786248964181740853",
"73463191204204564431060426836471513202",
"267439301836201696847425408562955562937",
"287377990133231422689232123088949248297",
"171349080217576014964799536297744041822",
"281092306262296867136556881606561574976",
"25545926184241971306554863771925751631",
"143193197765038328994215768726151324182",
"49788546146538852543926060567139493682",
"179603452463430623907817911323908835620",
"82964285951737692487310463562037071946",
"258127421503267992877408764697736102015",
"67433421786554083391091337335737940180",
"264860283539303196971006599220712869460",
"131482097097587027388682645891979487548",
"237507972872798038830713300594877147805",
"285003882088568658809748023223069040074",
"113607415243677827064637996538312251567",
"87629652201630371902436922683807695410",
"1493557598444627793975732378162637300",
"30283981649476055920651851825292136239",
"180179155268848316539516602386025210998",
"78353887204148161768486052259107642972",
"12671780420049273413701617789688030268",
"58537549369219364050323185857749544507",
"321719537355092638134484735690922962644",
"213139029693401432645818638190984305737",
"261051265947398001585372318371975538227",
"273187602649501362271683141812526888812",
"199977962556230964723033568214614247740",
"237507972872798038830713300594877147805",
"51246342444494525800211950038905228630",
"80292466676145207641406283062066510181",
"152309214173110614826227326509253666487",
"294383745031962398677047111738136893297",
"116921682925240358691138046613523449438",
"192877453143859029234927305124980290511",
"151826248249856420379171125465261585892",
"197402454113042234962351831698806223857",
"3654339721657183817195884969911072959",
"13592705828305451940705178938538862947"
]
},
"id": "CVE-2024-42162-f1a18c32",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32675d828c8a392e20d5b42375ed112c407e4b62",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/google/gve/gve_ethtool.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173703659493939035011042739750125471749",
"82203272242587580562139951282760096903",
"80861968154780553716155493238464656302",
"321660382737935316095375641266523882512",
"23302503971851096942791446029378548251",
"217405051525270771905813376270283476722",
"325173175465197909420282894291708591022",
"66845582270640151712786248964181740853",
"73463191204204564431060426836471513202",
"267439301836201696847425408562955562937",
"287377990133231422689232123088949248297",
"171349080217576014964799536297744041822",
"281092306262296867136556881606561574976",
"25545926184241971306554863771925751631",
"143193197765038328994215768726151324182",
"49788546146538852543926060567139493682",
"179603452463430623907817911323908835620",
"82964285951737692487310463562037071946",
"258127421503267992877408764697736102015",
"67433421786554083391091337335737940180",
"264860283539303196971006599220712869460",
"131482097097587027388682645891979487548",
"237507972872798038830713300594877147805",
"285003882088568658809748023223069040074",
"113607415243677827064637996538312251567",
"87629652201630371902436922683807695410",
"1493557598444627793975732378162637300",
"30283981649476055920651851825292136239",
"180179155268848316539516602386025210998",
"78353887204148161768486052259107642972",
"12671780420049273413701617789688030268",
"58537549369219364050323185857749544507",
"321719537355092638134484735690922962644",
"213139029693401432645818638190984305737",
"261051265947398001585372318371975538227",
"273187602649501362271683141812526888812",
"199977962556230964723033568214614247740",
"237507972872798038830713300594877147805",
"51246342444494525800211950038905228630",
"80292466676145207641406283062066510181",
"152309214173110614826227326509253666487",
"294383745031962398677047111738136893297",
"116921682925240358691138046613523449438",
"192877453143859029234927305124980290511",
"151826248249856420379171125465261585892",
"197402454113042234962351831698806223857",
"3654339721657183817195884969911072959",
"13592705828305451940705178938538862947"
]
},
"id": "CVE-2024-42162-f750dc33",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af9bcf910b1f86244f39e15e701b2dc564b469a6",
"signature_version": "v1"
}
]