** DISPUTED ** In drivers/char/virtio_console.c in the Linux kernel before
5.13.4, data corruption or loss can be triggered by an untrusted device
that supplies a buf->len value exceeding the buffer size. NOTE: the vendor
indicates that the cited data corruption is not a vulnerability in any
existing use case; the length validation was added solely for robustness in
the face of anomalous host OS behavior.

It was discovered that the Virtio console implementation in the Linux
kernel did not properly validate input lengths in some situations. A local
attacker could possibly use this to cause a denial of service (system
crash).