In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ACPI: APEI: GHES: fix ARM section length accounting after header<\/p>\n
In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_arm
\nheader with (err + 1), the remaining length was reduced by sizeof(err)
\n(pointer size) instead of sizeof(*err) (structure size).<\/p>\n
That overestimates the bytes left for cper_arm_err_info records and can
\nlet the parser read past the CPER section when err_info_num is large
\nenough relative to error_data_length.<\/p>\n
Use sizeof(*err) so the length accounting matches the pointer advance
\nand the earlier sizeof(*err) size check.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ACPI: APEI: GHES: fix ARM section length accounting after header<\/p>\n
In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_a<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-21510","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/21510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}