Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow A static code analysis tool flagged the possibility of buffer overflow when using copy_from_user() for a debugfs entry. Currently, it is possible that copy_from_user() copies more bytes than what would fit in the mybuf char array. Add a min() restriction check between sizeof(mybuf) - 1 and nbytes passed from the userspace buffer to protect against buffer overflow.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6a828b0f6192b4930894925d1c1d0dc1f1d99e6e to < 644a9d5e22761a41d5005a26996a643da96de962affected6a828b0f6192b4930894925d1c1d0dc1f1d99e6e to < e0e7faee3a7dd6f51350cda64997116a247eb045affected6a828b0f6192b4930894925d1c1d0dc1f1d99e6e to < f91037487036e2d2f18d3c2481be6b9a366bde7faffected6a828b0f6192b4930894925d1c1d0dc1f1d99e6e to < a9df88cb31dcbd72104ec5883f35cbc1fb587e47affected6a828b0f6192b4930894925d1c1d0dc1f1d99e6e to < ad050f6cf681ebb850a9d4bc19474d3896476301affected6a828b0f6192b4930894925d1c1d0dc1f1d99e6e to < c6087b82a9146826564a55c5ca0164cac40348f5affected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected5.4.244 to ≤ 5.4.*unaffected5.10.181 to ≤ 5.10.*unaffected5.15.113 to ≤ 5.15.*unaffected6.1.30 to ≤ 6.1.*unaffected6.3.4 to ≤ 6.3.*unaffected6.4 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/644a9d5e22761a41d5005a26996a643da96de962 ↗
- https://git.kernel.org/stable/c/e0e7faee3a7dd6f51350cda64997116a247eb045 ↗
- https://git.kernel.org/stable/c/f91037487036e2d2f18d3c2481be6b9a366bde7f ↗
- https://git.kernel.org/stable/c/a9df88cb31dcbd72104ec5883f35cbc1fb587e47 ↗
- https://git.kernel.org/stable/c/ad050f6cf681ebb850a9d4bc19474d3896476301 ↗
- https://git.kernel.org/stable/c/c6087b82a9146826564a55c5ca0164cac40348f5 ↗