Description
In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT. This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds. A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well. A follow-up patch completely removes this useless offset.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 002364b2d594a9afc0385c09e00994c510b1d089affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < fd4bcb991ebaf0d1813d81d9983cfa99f9ef5328affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 902f6d656441a511ac25c6cffce74496db10a078affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2ebcaa0e5db9b6044bb487ae1cf41bc601761567affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7eeef1e935d23db5265233d92395bd5c648a4021affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4e99103f757cdf636c6ee860994a19a346a11785affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8ee1b439b1540ae543149b15a2a61b9dff937d91affected0 to < 5.4.278affected0 to < 5.10.219affected0 to < 5.15.161affected0 to < 6.1.93affected0 to < 6.6.33affected0 to < 6.9.4affected
Linux Linux
Default version status: affected
5.4.278 to ≤ 5.4.*unaffected5.10.219 to ≤ 5.10.*unaffected5.15.161 to ≤ 5.15.*unaffected6.1.93 to ≤ 6.1.*unaffected6.6.33 to ≤ 6.6.*unaffected6.9.4 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/002364b2d594a9afc0385c09e00994c510b1d089 ↗
- https://git.kernel.org/stable/c/fd4bcb991ebaf0d1813d81d9983cfa99f9ef5328 ↗
- https://git.kernel.org/stable/c/902f6d656441a511ac25c6cffce74496db10a078 ↗
- https://git.kernel.org/stable/c/2ebcaa0e5db9b6044bb487ae1cf41bc601761567 ↗
- https://git.kernel.org/stable/c/7eeef1e935d23db5265233d92395bd5c648a4021 ↗
- https://git.kernel.org/stable/c/4e99103f757cdf636c6ee860994a19a346a11785 ↗
- https://git.kernel.org/stable/c/8ee1b439b1540ae543149b15a2a61b9dff937d91 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗