Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before c2c293ea7b61f12cdaad1e99a5b4efc58c88960a; affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before c2305b4c5fc15e20ac06c35738e0578eb4323750; affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before 61f214a878e96e2a8750bf96a98f78c658dba60c; affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before 4a54d8fcb093761e4c56eb211cf4e39bf8401fa1; affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before fe3e129ab49806aaaa3f22067ebc75c2dfbe4658; affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before ac92151ff2494130d9fc686055d6bbb9743a673e; affected 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 before b91e6aafe8d356086cc621bc03e35ba2299e4788 |
| Linux / Linux | affected 2.6.28; unaffected 0 before 2.6.28; unaffected 5.10.248 through 5.10.*; unaffected 5.15.198 through 5.15.*; unaffected 6.1.160 through 6.1.*; unaffected 6.6.120 through 6.6.*; unaffected 6.12.64 through 6.12.*; unaffected 6.18.3 through 6.18.*; unaffected 6.19 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/c2c293ea7b61f12cdaad1e99a5b4efc58c88960a
- https://git.kernel.org/stable/c/c2305b4c5fc15e20ac06c35738e0578eb4323750
- https://git.kernel.org/stable/c/61f214a878e96e2a8750bf96a98f78c658dba60c
- https://git.kernel.org/stable/c/4a54d8fcb093761e4c56eb211cf4e39bf8401fa1
- https://git.kernel.org/stable/c/fe3e129ab49806aaaa3f22067ebc75c2dfbe4658
- https://git.kernel.org/stable/c/ac92151ff2494130d9fc686055d6bbb9743a673e
- https://git.kernel.org/stable/c/b91e6aafe8d356086cc621bc03e35ba2299e4788
ADP enrichment
No English description supplied.
No references supplied.