title: powerpc/lib: Validate size for vector operations
description: In the Linux kernel, the following vulnerability has been resolved:
powerpc/lib: Validate size for vector operations
Some of the fp/vmx code in sstep.c assume a certain maximum size for the
instructions being emulated. The size of those operations however is
determined separately in analyse_instr().
Add a check to validate the assumption on the maximum size of the
operations, so as to prevent any unintended kernel stack corruption.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 1da177e4c3f4, lessThan: 42084a428a13, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: 0580f4403ad3, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: beee482cc4c9, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: de4f5ed63b8a, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: abd26515d4b7, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: 28b8ba8eebf2, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: 848e1d7fd710, status: affected, versionType: git
version: 1da177e4c3f4, lessThan: 8f9abaa6d7de, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 4.19.307, lessThanOrEqual: 4.19.*, status: unaffected, versionType: custom
version: 5.4.269, lessThanOrEqual: 5.4.*, status: unaffected, versionType: custom
version: 5.10.210, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.15.149, lessThanOrEqual: 5.15.*, status: unaffected, versionType: custom
version: 6.1.77, lessThanOrEqual: 6.1.*, status: unaffected, versionType: custom
version: 6.6.16, lessThanOrEqual: 6.6.*, status: unaffected, versionType: custom
version: 6.7.4, lessThanOrEqual: 6.7.*, status: unaffected, versionType: custom
version: 6.8, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
