Description
In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to < f4cb61138482dd0b7ba551037b61f5e50a889604affected723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to < 6cbba922934805f86eece6ba7010b7201962695daffected723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to < 10d50bc913b69fa18a5c6fbf293c7a87962e22efaffected723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to < 6059a66dba7f26b21852831432e17075f1a1c783affected723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to < e463548fd80e779efea1cb2d3049b8a7231e6925affected723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to < 495df2da6944477d282d5cc0c13174d06e25b310affected
Linux Linux
Default version status: affected
5.6affected0 to < 5.6unaffected6.1.191 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.17.13 to ≤ 6.17.*unaffected6.18.2 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f4cb61138482dd0b7ba551037b61f5e50a889604 ↗
- https://git.kernel.org/stable/c/6cbba922934805f86eece6ba7010b7201962695d ↗
- https://git.kernel.org/stable/c/10d50bc913b69fa18a5c6fbf293c7a87962e22ef ↗
- https://git.kernel.org/stable/c/6059a66dba7f26b21852831432e17075f1a1c783 ↗
- https://git.kernel.org/stable/c/e463548fd80e779efea1cb2d3049b8a7231e6925 ↗
- https://git.kernel.org/stable/c/495df2da6944477d282d5cc0c13174d06e25b310 ↗