Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow, because the string specifier in the format string sscanf() has no width limitation. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < 5e97dc748d13fad582136ba0c8cec215c7aeeb17affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < c513043e0afe6a8ba79d00af358655afabb576d2affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < 63cd11165e5e0ea2012254c764003eda1f9adb7daffectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < b6b26d86c61c441144c72f842f7469bb686e1211affected
Linux Linux
Default version status: affected
4.7affected0 to < 4.7unaffected5.4.237 to ≤ 5.4.*unaffected5.10.175 to ≤ 5.10.*unaffected5.15.103 to ≤ 5.15.*unaffected6.1.16 to ≤ 6.1.*unaffected6.2.3 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5e97dc748d13fad582136ba0c8cec215c7aeeb17 ↗
- https://git.kernel.org/stable/c/f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 ↗
- https://git.kernel.org/stable/c/c513043e0afe6a8ba79d00af358655afabb576d2 ↗
- https://git.kernel.org/stable/c/2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 ↗
- https://git.kernel.org/stable/c/63cd11165e5e0ea2012254c764003eda1f9adb7d ↗
- https://git.kernel.org/stable/c/b6b26d86c61c441144c72f842f7469bb686e1211 ↗