Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2023-53598

bus: mhi: host: Range check CHDBOFF and ERDBOFF

Description

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range check CHDBOFF and ERDBOFF If the value read from the CHDBOFF and ERDBOFF registers is outside the range of the MHI register space then an invalid address might be computed which later causes a kernel panic. Range check the read value to prevent a crash due to bad data from the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6cd330ae76ffd5c8f6294c423cabde7eeef1b40c to < 372f1752b74572b0a9d2288841eab7db17daccaeaffected
  • 6cd330ae76ffd5c8f6294c423cabde7eeef1b40c to < 2343385fe6eed11d0432ab42a97b3ca4aef06a99affected
  • 6cd330ae76ffd5c8f6294c423cabde7eeef1b40c to < a2cbb1a45a0c86ce77839c0875414efe1a89315eaffected
  • 6cd330ae76ffd5c8f6294c423cabde7eeef1b40c to < 83bf6b87e2dd053d95d89eb2f01ae885f9e568dbaffected
  • 6cd330ae76ffd5c8f6294c423cabde7eeef1b40c to < 4e584127ec2bd42a37c88badb49df409f21fa40aaffected
  • 6cd330ae76ffd5c8f6294c423cabde7eeef1b40c to < 6a0c637bfee69a74c104468544d9f2a6579626d0affected

Linux Linux

Default version status: affected

  • 5.7affected
  • 0 to < 5.7unaffected
  • 5.10.192 to ≤ 5.10.*unaffected
  • 5.15.112 to ≤ 5.15.*unaffected
  • 6.1.28 to ≤ 6.1.*unaffected
  • 6.2.15 to ≤ 6.2.*unaffected
  • 6.3.2 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References