Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `#mbox-cells` must be at least 1, there are many instances of `#mbox-cells = <0>;` in the device tree. If that is the case and the corresponding mailbox controller does not provide `fw_xlate` and of_xlate` function pointers, `fw_mbox_index_xlate()` will be used by default and out-of-bounds accesses could occur due to lack of bounds check in that function.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < 2c7ff651ec6b660c7c96a36db9328b3232f555d8affected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < ec0874447895b994182a962d2fee9ef075de5efdaffected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < 2662ed331a69c0b551f78af58f12eb629a89a36faffected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < 31c4c67dec3362094a6747a171a4848e98542265affected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < 01d9a8c2615d436b2b30c19c1afe9fcd5726ff6daffected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < 4caae8168d1b808c7d4ff481295292e3f97f90fbaffected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < f50b39fd7c72a8734153644ee945ca0d8b2e65abaffected2b6d83e2b8b7de82331a6a1dcd64b51020a6031c to < fcd7f96c783626c07ee3ed75fa3739a8a2052310affected
Linux Linux
Default version status: affected
3.18affected0 to < 3.18unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.77 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2c7ff651ec6b660c7c96a36db9328b3232f555d8 ↗
- https://git.kernel.org/stable/c/ec0874447895b994182a962d2fee9ef075de5efd ↗
- https://git.kernel.org/stable/c/2662ed331a69c0b551f78af58f12eb629a89a36f ↗
- https://git.kernel.org/stable/c/31c4c67dec3362094a6747a171a4848e98542265 ↗
- https://git.kernel.org/stable/c/01d9a8c2615d436b2b30c19c1afe9fcd5726ff6d ↗
- https://git.kernel.org/stable/c/4caae8168d1b808c7d4ff481295292e3f97f90fb ↗
- https://git.kernel.org/stable/c/f50b39fd7c72a8734153644ee945ca0d8b2e65ab ↗
- https://git.kernel.org/stable/c/fcd7f96c783626c07ee3ed75fa3739a8a2052310 ↗