Description
In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array of 'gpio_desc' pointers. But the memory is allocated for only one pointer. This will lead to out-of-bounds access later in the code if 'config::ngpios' is > 1. So fix the code to allocate enough memory to hold 'config::ngpios' of GPIO descriptors. While at it, also move the check for memory allocation failure to be below the allocation to make it more readable.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d6cd33ad71029a3f77ba1686caf55d4dea58d916 to < a3cd5ae7befbac849e0e0529c94ca04e8093cfd2affectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < 9fe71972869faed1f8f9b3beb9040f9c1b300c79affectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < 56738cbac3bbb1d39a71a07f57484dec1db8b239affectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7aaffectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < 24418bc77a66cb5be9f5a837431ba3674ed8b52faffectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < e4d19e5d71b217940e33f2ef6c6962b7b68c5606affectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < 3830ab97cda9599872625cc0dc7b00160193634faffectedd6cd33ad71029a3f77ba1686caf55d4dea58d916 to < c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3affected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected5.4.296 to ≤ 5.4.*unaffected5.10.240 to ≤ 5.10.*unaffected5.15.187 to ≤ 5.15.*unaffected6.1.144 to ≤ 6.1.*unaffected6.6.97 to ≤ 6.6.*unaffected6.12.37 to ≤ 6.12.*unaffected6.15.6 to ≤ 6.15.*unaffected6.16 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a3cd5ae7befbac849e0e0529c94ca04e8093cfd2 ↗
- https://git.kernel.org/stable/c/9fe71972869faed1f8f9b3beb9040f9c1b300c79 ↗
- https://git.kernel.org/stable/c/56738cbac3bbb1d39a71a07f57484dec1db8b239 ↗
- https://git.kernel.org/stable/c/a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7a ↗
- https://git.kernel.org/stable/c/24418bc77a66cb5be9f5a837431ba3674ed8b52f ↗
- https://git.kernel.org/stable/c/e4d19e5d71b217940e33f2ef6c6962b7b68c5606 ↗
- https://git.kernel.org/stable/c/3830ab97cda9599872625cc0dc7b00160193634f ↗
- https://git.kernel.org/stable/c/c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗