Description
In the Linux kernel, the following vulnerability has been resolved: comedi: dt9812: fix DMA buffers on stack USB transfer buffers are typically mapped for DMA and must not be allocated on the stack or transfers will fail. Allocate proper transfer buffers in the various command helpers and return an error on short transfers instead of acting on random stack data. Note that this also fixes a stack info leak on systems where DMA is not used as 32 bytes are always sent to the device regardless of how short the command is.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
63274cd7d38a3322d90b66a5bc976de1fb899051 to < a6af69768d5cb4b2528946d53be5fa19ade37723affected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 365a346cda82f51d835c49136a00a9df8a78c7f2affected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 8a52bc480992c7c9da3ebfea456af731f50a4b97affected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 39ea61037ae78f14fa121228dd962ea3280eacf3affected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 3efb7af8ac437085b6c776e5b54830b149d86efeaffected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 786f5b03450454557ff858a8bead5d7c0cbf78d6affected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 3ac273d154d634e2034508a14db82a95d7ad12edaffected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 20cebb8b620dc987e55ddc46801de986e081757eaffected63274cd7d38a3322d90b66a5bc976de1fb899051 to < 536de747bc48262225889a533db6650731ab25d3affected
Linux Linux
Default version status: affected
2.6.29affected0 to < 2.6.29unaffected4.4.292 to ≤ 4.4.*unaffected4.9.290 to ≤ 4.9.*unaffected4.14.255 to ≤ 4.14.*unaffected4.19.217 to ≤ 4.19.*unaffected5.4.159 to ≤ 5.4.*unaffected5.10.79 to ≤ 5.10.*unaffected5.14.18 to ≤ 5.14.*unaffected5.15.2 to ≤ 5.15.*unaffected5.16 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a6af69768d5cb4b2528946d53be5fa19ade37723 ↗
- https://git.kernel.org/stable/c/365a346cda82f51d835c49136a00a9df8a78c7f2 ↗
- https://git.kernel.org/stable/c/8a52bc480992c7c9da3ebfea456af731f50a4b97 ↗
- https://git.kernel.org/stable/c/39ea61037ae78f14fa121228dd962ea3280eacf3 ↗
- https://git.kernel.org/stable/c/3efb7af8ac437085b6c776e5b54830b149d86efe ↗
- https://git.kernel.org/stable/c/786f5b03450454557ff858a8bead5d7c0cbf78d6 ↗
- https://git.kernel.org/stable/c/3ac273d154d634e2034508a14db82a95d7ad12ed ↗
- https://git.kernel.org/stable/c/20cebb8b620dc987e55ddc46801de986e081757e ↗
- https://git.kernel.org/stable/c/536de747bc48262225889a533db6650731ab25d3 ↗