Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array of 'gpio_desc' pointers. But the memory is allocated for only one pointer. This will lead to out-of-bounds access later in the code if 'config::ngpios' is > 1. So fix the code to allocate enough memory to hold 'config::ngpios' of GPIO descriptors. While at it, also move the check for memory allocation failure to be below the allocation to make it more readable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before a3cd5ae7befbac849e0e0529c94ca04e8093cfd2; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before 9fe71972869faed1f8f9b3beb9040f9c1b300c79; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before 56738cbac3bbb1d39a71a07f57484dec1db8b239; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7a; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before 24418bc77a66cb5be9f5a837431ba3674ed8b52f; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before e4d19e5d71b217940e33f2ef6c6962b7b68c5606; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before 3830ab97cda9599872625cc0dc7b00160193634f; affected d6cd33ad71029a3f77ba1686caf55d4dea58d916 before c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3 |
| Linux / Linux | affected 5.1; unaffected 0 before 5.1; unaffected 5.4.296 through 5.4.*; unaffected 5.10.240 through 5.10.*; unaffected 5.15.187 through 5.15.*; unaffected 6.1.144 through 6.1.*; unaffected 6.6.97 through 6.6.*; unaffected 6.12.37 through 6.12.*; unaffected 6.15.6 through 6.15.*; unaffected 6.16 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/a3cd5ae7befbac849e0e0529c94ca04e8093cfd2
- https://git.kernel.org/stable/c/9fe71972869faed1f8f9b3beb9040f9c1b300c79
- https://git.kernel.org/stable/c/56738cbac3bbb1d39a71a07f57484dec1db8b239
- https://git.kernel.org/stable/c/a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7a
- https://git.kernel.org/stable/c/24418bc77a66cb5be9f5a837431ba3674ed8b52f
- https://git.kernel.org/stable/c/e4d19e5d71b217940e33f2ef6c6962b7b68c5606
- https://git.kernel.org/stable/c/3830ab97cda9599872625cc0dc7b00160193634f
- https://git.kernel.org/stable/c/c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3
ADP enrichment
No English description supplied.