Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: media: mgb4: protect driver against spectre Frequency range is set from sysfs via frequency_range_store(), being vulnerable to spectre, as reported by smatch: drivers/media/pci/mgb4/mgb4_cmt.c:231 mgb4_cmt_set_vin_freq_range() warn: potential spectre issue 'cmt_vals_in' [r] drivers/media/pci/mgb4/mgb4_cmt.c:238 mgb4_cmt_set_vin_freq_range() warn: possible spectre second half. 'reg_set' Fix it.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0ab13674a9bd10514486cf1670d71dbd8afec421 before e0bc90742bbd6eb9c63e6c22f8f6e10be7b1e225; affected 0ab13674a9bd10514486cf1670d71dbd8afec421 before 2aee207e5b3c94ef859316008119ea06d6798d49 |
| Linux / Linux | affected 6.7; unaffected 0 before 6.7; unaffected 6.11.8 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e0bc90742bbd6eb9c63e6c22f8f6e10be7b1e225
- https://git.kernel.org/stable/c/2aee207e5b3c94ef859316008119ea06d6798d49
ADP enrichment
No English description supplied.
No references supplied.