Description
In the Linux kernel, the following vulnerability has been resolved: platform/chrome: fix memory corruption in ioctl If "s_mem.bytes" is larger than the buffer size it leads to memory corruption.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
eda2e30c6684d67288edb841c6125d48c608a242 to < e548f9503c4b3292a60a63fe77dccea62999a35aaffectededa2e30c6684d67288edb841c6125d48c608a242 to < 868fc93b615b9f6c2b0b1894536618fa6cd66accaffectededa2e30c6684d67288edb841c6125d48c608a242 to < fd1d3b265784a2243fcaef06aebfb2f8ee733cecaffectededa2e30c6684d67288edb841c6125d48c608a242 to < f143f1d9a8e5c6c9db3de81ca270191226fcce36affectededa2e30c6684d67288edb841c6125d48c608a242 to < 0c2e18924504208644d18415667895a4ac54cf2aaffectededa2e30c6684d67288edb841c6125d48c608a242 to < 8a07b45fd3c2dda24fad43639be5335a4595196aaffected
Linux Linux
Default version status: affected
5.4affected0 to < 5.4unaffected5.4.220 to ≤ 5.4.*unaffected5.10.150 to ≤ 5.10.*unaffected5.15.75 to ≤ 5.15.*unaffected5.19.17 to ≤ 5.19.*unaffected6.0.3 to ≤ 6.0.*unaffected6.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e548f9503c4b3292a60a63fe77dccea62999a35a ↗
- https://git.kernel.org/stable/c/868fc93b615b9f6c2b0b1894536618fa6cd66acc ↗
- https://git.kernel.org/stable/c/fd1d3b265784a2243fcaef06aebfb2f8ee733cec ↗
- https://git.kernel.org/stable/c/f143f1d9a8e5c6c9db3de81ca270191226fcce36 ↗
- https://git.kernel.org/stable/c/0c2e18924504208644d18415667895a4ac54cf2a ↗
- https://git.kernel.org/stable/c/8a07b45fd3c2dda24fad43639be5335a4595196a ↗