CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the `dmar_latency_disable()` function, which incorrectly computes the size for a memory zeroing operation, leading to potential out-of-bounds writes and memory corruption. This flaw could allow an attacker to manipulate memory adjacent to the latency statistic entry, potentially leading to system instability or exploitation. Linux system administrators and developers should prioritize this fix to mitigate risks associated with memory corruption vulnerabilities.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() dmar_latency_disable() intends to zero out only the single latency_statistic entry for the given type, but the memset size was computed as sizeof(*lstat) * DMAR_LATENCY_NUM, which clears the entire array starting from &lstat[type]. When type > 0, this writes beyond the end of the allocated array, corrupting adjacent memory. Fix by using sizeof(*lstat) to clear only the target entry.