net: vmxnet3: validate configuration values during activate (CVE-2021-20203)
While activating device in vmxnet3_acticate_device(), it does not validate guest supplied configuration values against predefined minimum - maximum limits. This may lead to integer overflow or OOB access issues. Add checks to avoid it. Fixes: CVE-2021-20203 Buglink: https://bugs.launchpad.net/qemu/+bug/1913873 Reported-by:Gaoning Pan <pgn@zju.edu.cn> Signed-off-by:
Prasad J Pandit <pjp@fedoraproject.org> Signed-off-by:
Jason Wang <jasowang@redhat.com>
Loading
Please register or sign in to comment