Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocations If dts property power-supplies has multiple values, then accessing to psy->supplied_from[i-1] in __power_supply_populate_supplied_from will overrun supplied_from array.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f6e0b081fb300a4601b064346963cf6bb163f437 before ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2; affected f6e0b081fb300a4601b064346963cf6bb163f437 before 23a29ee1d9de38b7d6226b27653bc736b28ff05a; affected f6e0b081fb300a4601b064346963cf6bb163f437 before fefc9dad30d545be288d50a0b10d00465015fcfe; affected f6e0b081fb300a4601b064346963cf6bb163f437 before d0503357653ee62188987a26baa2d7f3689f367e; affected f6e0b081fb300a4601b064346963cf6bb163f437 before 14357ba006e1586e4b4e809c074b21baf0aa4c4b; affected f6e0b081fb300a4601b064346963cf6bb163f437 before ba61aed9a34671222d1149acfc2f0179a9ce7e80 |
| Linux / Linux | affected 3.10; unaffected 0 before 3.10; unaffected 6.1.178 through 6.1.*; unaffected 6.6.145 through 6.6.*; unaffected 6.12.97 through 6.12.*; unaffected 6.18.40 through 6.18.*; unaffected 7.1.5 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2
- https://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05a
- https://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe
- https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367e
- https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4b
- https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80