Description
The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeBSD | FreeBSD | 14.1-RELEASE – < p6, 13.4-RELEASE – < p2, 13.3-RELEASE – < p8 | p6 |
Advisories 1
- WID-SEC-2024-3305 FreeBSD Project FreeBSD OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 29, 2024