In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
scsi: sd_zbc: Reject disks with too many zones<\/p>\n
sd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and
\nstores the result in the unsigned int nr_zones field of struct
\nzoned_disk_info, silently truncating counts that exceed 32 bits. The
\ntruncated count is later used to size per-zone resources, while the device
\nmay still report more zones than fit.<\/p>\n
Moreover, sd_zbc_report_zones() counts the reported zones with a signed int
\nzone_idx, which overflows past INT_MAX. Reject devices reporting more than
\nINT_MAX zones at scan time; such a device is not realistic for any medium
\nthat exists today, and accepting it produces inconsistent zone bookkeeping.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
scsi: sd_zbc: Reject disks with too many zones<\/p>\n
sd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and
\nstores <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-41106","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/41106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=41106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=41106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=41106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}