Description
In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as addr, what may result in an out-of-bounds access to array mdio_map. One existing case is stmmac_init_phy() that may pass -1 as addr. Therefore validate addr before using it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < 1d80c259dfbadefa61b7ea334dfce5cb57f8c72faffected7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < c431a3d642593bbdb99e8a9e3eed608b730db6f8affected7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < 8a7b9560a3a8eb8724888c426e05926752f73aa0affected7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < 4bc5f1f6bc94e695dfd912122af96e7115a0ddb8affected7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < ad67de330d83e8078372b52af18ffe8d39e26c85affected7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < 7879626296e6ffd838ae0f2af1ab49ee46354973affected7f854420fbfe9d49afe2ffb1df052cfe8e215541 to < 867dbe784c5010a466f00a7d1467c1c5ea569c75affected
Linux Linux
Default version status: affected
4.5affected0 to < 4.5unaffected4.14.305 to ≤ 4.14.*unaffected4.19.272 to ≤ 4.19.*unaffected5.4.231 to ≤ 5.4.*unaffected5.10.166 to ≤ 5.10.*unaffected5.15.91 to ≤ 5.15.*unaffected6.1.9 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1d80c259dfbadefa61b7ea334dfce5cb57f8c72f ↗
- https://git.kernel.org/stable/c/c431a3d642593bbdb99e8a9e3eed608b730db6f8 ↗
- https://git.kernel.org/stable/c/8a7b9560a3a8eb8724888c426e05926752f73aa0 ↗
- https://git.kernel.org/stable/c/4bc5f1f6bc94e695dfd912122af96e7115a0ddb8 ↗
- https://git.kernel.org/stable/c/ad67de330d83e8078372b52af18ffe8d39e26c85 ↗
- https://git.kernel.org/stable/c/7879626296e6ffd838ae0f2af1ab49ee46354973 ↗
- https://git.kernel.org/stable/c/867dbe784c5010a466f00a7d1467c1c5ea569c75 ↗