CVE-2024-53082

virtio_net: Add hash_key_length check

State: Published
Severity: 8.4 High
Published: Nov 19, 2024
Updated: Aug 5, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: Add hash_key_length check

Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	c7114b1249fa3b5f3a434606ba4cc89c4a27d618 to before f3401e3c8d339ddb6ccb2e3d11ad634b7846a806Affected c7114b1249fa3b5f3a434606ba4cc89c4a27d618 to before af0aa8aecbe8985079232902894cc4cb62795691Affected c7114b1249fa3b5f3a434606ba4cc89c4a27d618 to before 6a18a783b1fa590ad1ed785907263e4b86adcfe2Affected c7114b1249fa3b5f3a434606ba4cc89c4a27d618 to before 3f7d9c1964fcd16d02a8a9d4fd6f6cb60c4cc530Affected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.