-

CVE-2026-80779

net/ionic: avoid OOB TX partner lookup for hwstamp RXQ

In the Linux kernel, the following vulnerability has been resolved:

net/ionic: avoid OOB TX partner lookup for hwstamp RXQ

The dedicated hardware timestamp RX queue is allocated with q->index
equal to lif->ionic->nrxqs_per_lif. The normal txqcqs array only
contains the regular queue pairs, so using that index to set rxq->partner
can read one entry past txqcqs[] and then write through the derived
pointer.
Only link RX/TX partners for normal queue-pair indexes. Leave the hwstamp
RX queue unpaired, and make the XDP_TX path abort cleanly if an RX queue
has no TX partner.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8eeed8373e1cca836799bf8e4a05cffa8e444908
Version < 881a805a8029ba48c0ce81c6674910f8d83f7afb
Status affected
Version 8eeed8373e1cca836799bf8e4a05cffa8e444908
Version < 39fc615e355b65b8d43be30da57aa95ae6eaf688
Status affected
Version 8eeed8373e1cca836799bf8e4a05cffa8e444908
Version < f3868046e8e2e761d4d943a232bd109ff22a7d5b
Status affected
Version 8eeed8373e1cca836799bf8e4a05cffa8e444908
Version < ea081b4435515ac7177eb598a3c0678d1b9e7911
Status affected
Version 8eeed8373e1cca836799bf8e4a05cffa8e444908
Version < d92255b405fb6f5acca408239ccd742e0a42c9cb
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.9
Status affected
Version 0
Version < 6.9
Status unaffected
Version <= 6.12.*
Version 6.12.106
Status unaffected
Version <= 6.18.*
Version 6.18.47
Status unaffected
Version <= 7.1.*
Version 7.1.11
Status unaffected
Version <= 7.2.*
Version 7.2.1
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.063
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/881a805a8029ba48c0ce81c6674910f8d83f7afb
https://git.kernel.org/stable/c/39fc615e355b65b8d43be30da57aa95ae6eaf688
https://git.kernel.org/stable/c/f3868046e8e2e761d4d943a232bd109ff22a7d5b
https://git.kernel.org/stable/c/ea081b4435515ac7177eb598a3c0678d1b9e7911
https://git.kernel.org/stable/c/d92255b405fb6f5acca408239ccd742e0a42c9cb