Description
In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word = 0 assignment.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < c5f6fefcda8fac8f082b6c5bf416567f4e100c51affected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < e5117f6e7adcf9fd7546cdd0edc9abe4474bc98baffected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < f54e8e1e39dacccebcfb9a9a36f0552a0a97e2efaffected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < a930cddfd153b5d4401df0c01effa14c831ff21eaffected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < c85db2d4432de4ff9d97006691ce2dcb5bda660eaffected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < 784bc785a453eb2f8433dd62075befdfa1b2d6fdaffected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < c951a0859fdacf49a2298b5551a7e52b95ff6f51affected6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 to < 14a22762c3daeac59a5a534e124acbb4d7a79b3aaffected
Linux Linux
Default version status: affected
4.4affected0 to < 4.4unaffected4.19.324 to ≤ 4.19.*unaffected5.4.286 to ≤ 5.4.*unaffected5.10.230 to ≤ 5.10.*unaffected5.15.172 to ≤ 5.15.*unaffected6.1.117 to ≤ 6.1.*unaffected6.6.61 to ≤ 6.6.*unaffected6.11.8 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51 ↗
- https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b ↗
- https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef ↗
- https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e ↗
- https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e ↗
- https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd ↗
- https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51 ↗
- https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗