Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word = 0 assignment.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before c5f6fefcda8fac8f082b6c5bf416567f4e100c51; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before a930cddfd153b5d4401df0c01effa14c831ff21e; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before c85db2d4432de4ff9d97006691ce2dcb5bda660e; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before 784bc785a453eb2f8433dd62075befdfa1b2d6fd; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before c951a0859fdacf49a2298b5551a7e52b95ff6f51; affected 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 before 14a22762c3daeac59a5a534e124acbb4d7a79b3a |
| Linux / Linux | affected 4.4; unaffected 0 before 4.4; unaffected 4.19.324 through 4.19.*; unaffected 5.4.286 through 5.4.*; unaffected 5.10.230 through 5.10.*; unaffected 5.15.172 through 5.15.*; unaffected 6.1.117 through 6.1.*; unaffected 6.6.61 through 6.6.*; unaffected 6.11.8 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51
- https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b
- https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef
- https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e
- https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e
- https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd
- https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51
- https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.