CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HIn the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields. A flaw was found in the `prestera` network driver in the Linux kernel. The `prestera_fw_hdr_parse()` function reads the firmware header before checking that the firmware image contains the entire header. This oversight could allow a local attacker to provide a specially crafted, malformed firmware image, potentially leading to a denial of service (DoS) by causing the system to crash or become unstable.
Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…