Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the channel ID from the event ring element sent by the device which can be any value between 0 and 255. In order to prevent any out of bound accesses, add a check against the maximum number of channels supported by the controller and those channels not configured yet so as to skip processing of that event ring element.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 before 3efec3b4b16fc7af25676a94230a8ab2a3bb867c; affected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 before aed4f5b51aba41e2afd7cfda20a0571a6a67dfe9; affected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 before 546362a9ef2ef40b57c6605f14e88ced507f8dd0 |
| Linux / Linux | affected 5.7; unaffected 0 before 5.7; unaffected 5.10.54 through 5.10.*; unaffected 5.13.6 through 5.13.*; unaffected 5.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/3efec3b4b16fc7af25676a94230a8ab2a3bb867c
- https://git.kernel.org/stable/c/aed4f5b51aba41e2afd7cfda20a0571a6a67dfe9
- https://git.kernel.org/stable/c/546362a9ef2ef40b57c6605f14e88ced507f8dd0
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.