Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53541

mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write When the oob buffer length is not in multiple of words, the oob write function does out-of-bounds read on the oob source buffer at the last iteration. Fix that by always checking length limit on the oob buffer read and fill with 0xff when reaching the end of the buffer to the oob registers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < 2bc3d6ac704ea7263175ea3da663fdbbb7f3dd8baffected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < 14b1d00520b4d6a4818364334ce472b79cfc8976affected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < aae45746f4aee9818296e0500e0703e9d8caa5b8affected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < d00b031266514a9395124704630b056a5185ec17affected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < 2353b7bb61e45e7cfd21505d0c6747ac8c9496a1affected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < 45fe4ad7f439799ee1b7b5f80bf82e8b34a98d25affected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < 648d1150a688698e37f7aaf302860180901cb30eaffected
  • 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 to < 5d53244186c9ac58cb88d76a0958ca55b83a15cdaffected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 4.14.326 to ≤ 4.14.*unaffected
  • 4.19.295 to ≤ 4.19.*unaffected
  • 5.4.257 to ≤ 5.4.*unaffected
  • 5.10.195 to ≤ 5.10.*unaffected
  • 5.15.132 to ≤ 5.15.*unaffected
  • 6.1.54 to ≤ 6.1.*unaffected
  • 6.5.4 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References