Linux Kernel VDPA Queue Index Attribute Length Check Vulnerability

A vulnerability in the Linux kernel's Virtual Data Path Accelerator (VDPA) management can lead to an out-of-bounds read. This issue arises because the VDPA Netlink policy, which validates incoming messages, previously lacked a proper length check for the queue index attribute. Without this validation, it was possible for an illegal Netlink attribute to be created after parsing, similar to the issue described in CVE-2023-3773. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can be exploited to read memory out of the intended bounds, potentially leading to information disclosure or other memory-related issues.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. Instructions for downloading the patched version are available in the Linux kernel documentation.