Description
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeof(*meas) to correctly match the buffer element type.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8f3f130852785dac0759843835ca97c3bacc2b10 to < 9aff2e9c2927ecd9652872a43a0725f101128104affected8f3f130852785dac0759843835ca97c3bacc2b10 to < 08881d82f94deaa51800360029908863e5c4c39daffected8f3f130852785dac0759843835ca97c3bacc2b10 to < dcdf1e92674efb6692f4ebe189e0aa9fde23a541affected8f3f130852785dac0759843835ca97c3bacc2b10 to < 2a4d111a6a34afb8bb4f118009e7728ed2ec7e10affected8f3f130852785dac0759843835ca97c3bacc2b10 to < 90e978ace598567e6e30de79805bddf37cf892acaffected8f3f130852785dac0759843835ca97c3bacc2b10 to < 165f12b40901c6a7aca15796da239726ddcdc5adaffected8f3f130852785dac0759843835ca97c3bacc2b10 to < 216345f98cae7fcc84f49728c67478ac00321c87affected
Linux Linux
Default version status: affected
5.14affected0 to < 5.14unaffected5.15.203 to ≤ 5.15.*unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.78 to ≤ 6.12.*unaffected6.18.19 to ≤ 6.18.*unaffected6.19.9 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9aff2e9c2927ecd9652872a43a0725f101128104 ↗
- https://git.kernel.org/stable/c/08881d82f94deaa51800360029908863e5c4c39d ↗
- https://git.kernel.org/stable/c/dcdf1e92674efb6692f4ebe189e0aa9fde23a541 ↗
- https://git.kernel.org/stable/c/2a4d111a6a34afb8bb4f118009e7728ed2ec7e10 ↗
- https://git.kernel.org/stable/c/90e978ace598567e6e30de79805bddf37cf892ac ↗
- https://git.kernel.org/stable/c/165f12b40901c6a7aca15796da239726ddcdc5ad ↗
- https://git.kernel.org/stable/c/216345f98cae7fcc84f49728c67478ac00321c87 ↗