Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset domains Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave. Add an internal consistency check before any such domains descriptors accesses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to < 7184491fc515f391afba23d0e9b690caaea72dafaffected95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to < f2277d9e2a0d092c13bae7ee82d75432bb8b5108affected95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to < 1f08a1b26cfc53b7715abc46857c6023bb1b87deaffected95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to < 8e65edf0d37698f7a6cb174608d3ec7976baf49eaffected95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to < e9076ffbcaed5da6c182b144ef9f6e24554af268affected
Linux Linux
Default version status: affected
5.4affected0 to < 5.4unaffected5.4.277 to ≤ 5.4.*unaffected5.10.218 to ≤ 5.10.*unaffected5.15.71 to ≤ 5.15.*unaffected5.19.12 to ≤ 5.19.*unaffected6.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7184491fc515f391afba23d0e9b690caaea72daf ↗
- https://git.kernel.org/stable/c/f2277d9e2a0d092c13bae7ee82d75432bb8b5108 ↗
- https://git.kernel.org/stable/c/1f08a1b26cfc53b7715abc46857c6023bb1b87de ↗
- https://git.kernel.org/stable/c/8e65edf0d37698f7a6cb174608d3ec7976baf49e ↗
- https://git.kernel.org/stable/c/e9076ffbcaed5da6c182b144ef9f6e24554af268 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html ↗
- https://security.netapp.com/advisory/ntap-20240912-0008/ ↗