Description
In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem client uses a buffer size less than 4 bytes, regmap_read will write out of bounds as it expects the buffer to point at an unsigned int. Fix this by using an intermediary unsigned int to hold the value.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < 21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4affectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < 6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7caffectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < e5536677da803ed54a29a446515c28dce7d3d574affectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1affectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < 9adefa7b9559d0f21034a5d5ec1b55840c9348b9affectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < e5e06455760f2995b16a176033909347929d1128affectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < 517aedb365f2c94e2d7e0b908ac7127df76203a1affectedfadfd092ee9138825d8c2a4f95719d2e2e3202b9 to < 3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70caffected
Linux Linux
Default version status: affected
5.2affected0 to < 5.2unaffected5.4.291 to ≤ 5.4.*unaffected5.10.235 to ≤ 5.10.*unaffected5.15.179 to ≤ 5.15.*unaffected6.1.129 to ≤ 6.1.*unaffected6.6.76 to ≤ 6.6.*unaffected6.12.13 to ≤ 6.12.*unaffected6.13.2 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4 ↗
- https://git.kernel.org/stable/c/6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7c ↗
- https://git.kernel.org/stable/c/e5536677da803ed54a29a446515c28dce7d3d574 ↗
- https://git.kernel.org/stable/c/c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1 ↗
- https://git.kernel.org/stable/c/9adefa7b9559d0f21034a5d5ec1b55840c9348b9 ↗
- https://git.kernel.org/stable/c/e5e06455760f2995b16a176033909347929d1128 ↗
- https://git.kernel.org/stable/c/517aedb365f2c94e2d7e0b908ac7127df76203a1 ↗
- https://git.kernel.org/stable/c/3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70c ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html ↗