Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49952

misc: fastrpc: fix memory corruption on probe

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on probe Add the missing sanity check on the probed-session count to avoid corrupting memory beyond the fixed-size slab-allocated session array when there are more than FASTRPC_MAX_SESSIONS sessions defined in the devicetree.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f6f9279f2bf0e37e2f1fb119d8832b8568536a04 to < ec186b9f4aa2e6444d5308a6cc268aada7007639affected
  • f6f9279f2bf0e37e2f1fb119d8832b8568536a04 to < c99bc901d5eb9fbdd7bd39f625e170ce97390336affected
  • f6f9279f2bf0e37e2f1fb119d8832b8568536a04 to < 0e33b0f322fecd7a92d9dc186535cdf97940a856affected
  • f6f9279f2bf0e37e2f1fb119d8832b8568536a04 to < c0425c2facd9166fa083f90c9f3187ace0c7837aaffected
  • f6f9279f2bf0e37e2f1fb119d8832b8568536a04 to < 9baa1415d9abdd1e08362ea2dcfadfacee8690b5affected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 5.4.213 to ≤ 5.4.*unaffected
  • 5.10.142 to ≤ 5.10.*unaffected
  • 5.15.66 to ≤ 5.15.*unaffected
  • 5.19.8 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References