Description
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
21fab1d0595eacf781705ec3509012a28f298245 to < da1a955c48a16e16e925d6544793914e52a6fa51affected21fab1d0595eacf781705ec3509012a28f298245 to < 9e5c7d52085b8c84bc82a261580f0eb170039325affected21fab1d0595eacf781705ec3509012a28f298245 to < 467afb1dd630d8c6d172bd6cacc125199b5f4f2daffected21fab1d0595eacf781705ec3509012a28f298245 to < e4dd25da784b2e07dbfbf04509afa4c5a1375227affected21fab1d0595eacf781705ec3509012a28f298245 to < 2b28a7d261cb309912596d6a2d383ca370483527affected21fab1d0595eacf781705ec3509012a28f298245 to < 0dfe68394cbe1d4fe579fb325ecc813c50528c5aaffected21fab1d0595eacf781705ec3509012a28f298245 to < 799e8dd2022d2e13f0c5c1906b40ceca07a23349affected21fab1d0595eacf781705ec3509012a28f298245 to < 9b4f5028e493cb353a5c8f5c45073eeea0303abdaffected
Linux Linux
Default version status: affected
2.6.32affected0 to < 2.6.32unaffected4.14.308 to ≤ 4.14.*unaffected4.19.276 to ≤ 4.19.*unaffected5.4.235 to ≤ 5.4.*unaffected5.10.173 to ≤ 5.10.*unaffected5.15.99 to ≤ 5.15.*unaffected6.1.16 to ≤ 6.1.*unaffected6.2.3 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/da1a955c48a16e16e925d6544793914e52a6fa51 ↗
- https://git.kernel.org/stable/c/9e5c7d52085b8c84bc82a261580f0eb170039325 ↗
- https://git.kernel.org/stable/c/467afb1dd630d8c6d172bd6cacc125199b5f4f2d ↗
- https://git.kernel.org/stable/c/e4dd25da784b2e07dbfbf04509afa4c5a1375227 ↗
- https://git.kernel.org/stable/c/2b28a7d261cb309912596d6a2d383ca370483527 ↗
- https://git.kernel.org/stable/c/0dfe68394cbe1d4fe579fb325ecc813c50528c5a ↗
- https://git.kernel.org/stable/c/799e8dd2022d2e13f0c5c1906b40ceca07a23349 ↗
- https://git.kernel.org/stable/c/9b4f5028e493cb353a5c8f5c45073eeea0303abd ↗