Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to prevent reported warnings
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b before 407c8708fb1bf2d4afc5337ef50635cf540c364b; affected 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b before 9e4a3f47eff476097e0c7faac04d1831fc70237d; affected 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b before 8d31cbab4c295d7010ebb729e9d02d0e9cece18f; affected 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b before f68599581067e8a5a8901ba9eb270b4519690e26; affected 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b before bb436283e25aaf1533ce061605d23a9564447bdf |
| Linux / Linux | affected 4.15; unaffected 0 before 4.15; unaffected 4.19.224 through 4.19.*; unaffected 5.4.170 through 5.4.*; unaffected 5.10.90 through 5.10.*; unaffected 5.15.13 through 5.15.*; unaffected 5.16 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/407c8708fb1bf2d4afc5337ef50635cf540c364b
- https://git.kernel.org/stable/c/9e4a3f47eff476097e0c7faac04d1831fc70237d
- https://git.kernel.org/stable/c/8d31cbab4c295d7010ebb729e9d02d0e9cece18f
- https://git.kernel.org/stable/c/f68599581067e8a5a8901ba9eb270b4519690e26
- https://git.kernel.org/stable/c/bb436283e25aaf1533ce061605d23a9564447bdf
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/407c8708fb1bf2d4afc5337ef50635cf540c364b
- https://git.kernel.org/stable/c/9e4a3f47eff476097e0c7faac04d1831fc70237d
- https://git.kernel.org/stable/c/8d31cbab4c295d7010ebb729e9d02d0e9cece18f
- https://git.kernel.org/stable/c/f68599581067e8a5a8901ba9eb270b4519690e26
- https://git.kernel.org/stable/c/bb436283e25aaf1533ce061605d23a9564447bdf