In the Linux kernel, the following vulnerability has been resolved:
virtio-net: Add validation for used length
This adds validation for used length (might come from an untrusted device) to avoid data corruption or loss.
{ "urgency": "not yet assigned" }