Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c before 6cbba922934805f86eece6ba7010b7201962695d; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c before 10d50bc913b69fa18a5c6fbf293c7a87962e22ef; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c before 6059a66dba7f26b21852831432e17075f1a1c783; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c before e463548fd80e779efea1cb2d3049b8a7231e6925; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c before 495df2da6944477d282d5cc0c13174d06e25b310 |
| Linux / Linux | affected 5.6; unaffected 0 before 5.6; unaffected 6.6.120 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.17.13 through 6.17.*; unaffected 6.18.2 through 6.18.*; unaffected 6.19 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/6cbba922934805f86eece6ba7010b7201962695d
- https://git.kernel.org/stable/c/10d50bc913b69fa18a5c6fbf293c7a87962e22ef
- https://git.kernel.org/stable/c/6059a66dba7f26b21852831432e17075f1a1c783
- https://git.kernel.org/stable/c/e463548fd80e779efea1cb2d3049b8a7231e6925
- https://git.kernel.org/stable/c/495df2da6944477d282d5cc0c13174d06e25b310