Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-41026

mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No check is done on the size of the data to be transmiited. This causes a kernel panic when this size exceeds the sg_miter's length. Limit the number of transmitted bytes to sgm->length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ed01d210fd910f7fa7933638df14ffb8d4aac2a9 to < c561c4ecce712f94b442db5960e281f13b28df2eaffected
  • ed01d210fd910f7fa7933638df14ffb8d4aac2a9 to < 16198eef11c1929374381d7f6271b4bf6aa44615affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.9.10 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References