Description
In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land within the current page. Found by ZeroPath (https://zeropath.com)
Product status
8e122582680c6f8acd686a5a2af9c0e46fe90f2d (git) before e8623e9c451e23d84b870811f42fd872b4089ef6
8e122582680c6f8acd686a5a2af9c0e46fe90f2d (git) before 2a77c8dd49bccf0ca232be7c836cec1209abb8da
8e122582680c6f8acd686a5a2af9c0e46fe90f2d (git) before a8ee9099f30654917aa68f55d707b5627e1dbf77
6.8
Any version before 6.8
6.12.64 (semver)
6.18.3 (semver)
6.19 (original_commit_for_fix)
References
git.kernel.org/...c/e8623e9c451e23d84b870811f42fd872b4089ef6
git.kernel.org/...c/2a77c8dd49bccf0ca232be7c836cec1209abb8da
git.kernel.org/...c/a8ee9099f30654917aa68f55d707b5627e1dbf77