Описание
In the Linux kernel, the following vulnerability has been resolved:
virtio_net: Add hash_key_length check
Add hash_key_length check in virtnet_probe() to avoid possible out of
bound errors when setting/reading the hash key.
A flaw was found in the Linux kernel's virtio_net network driver. The driver does not properly validate the hash key length during device initialization. A local user could exploit this vulnerability when setting or reading the hash key, triggering out-of-bounds memory access. This flaw primarily results in a Denial of Service (DoS) through a system crash, or potentially exposes sensitive kernel memory.
Меры по смягчению последствий
Prevent the virtio_net kernel module from loading on systems where virtio network devices are not required:
- Blacklist the module using the modprobe configuration:
echo "install virtio_net /bin/true" >> /etc/modprobe.d/disable-virtio_net.conf
- If the module is currently loaded, attempt to unload it:
modprobe -r virtio_net
Caveats: Disabling the virtio_net driver prevents any virtio virtual network interfaces from functioning, disrupting network connectivity on virtual machines using this driver. A system reboot is required if the module is in active use and cannot be dynamically unloaded.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.
In the Linux kernel, the following vulnerability has been resolved: v ...
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.
EPSS
7.1 High
CVSS3