Find real vulnerabilities before they ship
In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4_register_vlan() or mlx4_register_mac(), and there is no free entry, the loop terminates without updating the local variable free thus causing out of array bounds access.
Base Score
5.6
| Base Score | 5.6 |
|---|---|
| Vector String | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H |
| Base Severity | Medium |
| Version | 3.1 |
| Attack Vector (AV) | LOCAL |
