Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 647371a6609ddf8700fe151af72e32daebb9baa7 before 962e565f45dbea77d12a7ed5ef34df8f0c603e28; affected 647371a6609ddf8700fe151af72e32daebb9baa7 before 5419be345f32222750e006b85b7f9bae1a285c8e; affected 647371a6609ddf8700fe151af72e32daebb9baa7 before 43c68f52aecd519eb682fa09d57ae52c896f860f; affected 647371a6609ddf8700fe151af72e32daebb9baa7 before 29f82a2280e170429370e7a842cde4e70ead8547; affected 647371a6609ddf8700fe151af72e32daebb9baa7 before 3837c3f29fbc3b8c12bebf5c62741e2befe3482a |
| Linux / Linux | affected 6.3; unaffected 0 before 6.3; unaffected 6.6.160 through 6.6.*; unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2.7 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/962e565f45dbea77d12a7ed5ef34df8f0c603e28
- https://git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8e
- https://git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860f
- https://git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547
- https://git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482a