Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have indio_dev->num_channels includes all physical channels + timestamp channel. On other side we have an array allocated only for physical channels. So, fix memory corruption by ARRAY_SIZE() instead of num_channels variable. Note the first case is a cleanup rather than a fix as the software timestamp channel bit in active_scanmask is never set by the IIO core.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9374e8f5a38defe90bc65b2decf317c1c62d91dd to < 0cb9b2f73c182d242a640e512f4785c7c504512faffected9374e8f5a38defe90bc65b2decf317c1c62d91dd to < 082d2c047b0d305bb0b6e9f9d671a09470e2db2daffected9374e8f5a38defe90bc65b2decf317c1c62d91dd to < b7a78a8adaa8849c02f174d707aead0f85dca0daaffected
Linux Linux
Default version status: affected
5.14affected0 to < 5.14unaffected5.15.26 to ≤ 5.15.*unaffected5.16.12 to ≤ 5.16.*unaffected5.17 to ≤ *unaffected