Description
In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty message instead of an error when fetching events. There are apparently some new BMCs that make this error, so we need to compensate.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cf1ef30c42a7079e5bad863cd01c52aa3a17c3acaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 474e53d4397087913a5b9c9eb90fa068da4808bfaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 01f8387fa5b796f13cf50014c171f6da7abc46eaaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2418e4b21fb1355504d095da5d5f0a210564a43daffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7f7ada72c07a83b46045ddfeee526bd9e2e3c8f0affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 42432b579a594b66ac32e5e7b7c26e6bc578ec89affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 24269264c3d59a49eb09b10af2c75b14f2931482affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 36920f30e78e69df01f9691c470b6f3ba8aebf98affected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.140 to ≤ 6.6.*unaffected6.12.88 to ≤ 6.12.*unaffected6.18.30 to ≤ 6.18.*unaffected7.0.7 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/cf1ef30c42a7079e5bad863cd01c52aa3a17c3ac ↗
- https://git.kernel.org/stable/c/474e53d4397087913a5b9c9eb90fa068da4808bf ↗
- https://git.kernel.org/stable/c/01f8387fa5b796f13cf50014c171f6da7abc46ea ↗
- https://git.kernel.org/stable/c/2418e4b21fb1355504d095da5d5f0a210564a43d ↗
- https://git.kernel.org/stable/c/7f7ada72c07a83b46045ddfeee526bd9e2e3c8f0 ↗
- https://git.kernel.org/stable/c/42432b579a594b66ac32e5e7b7c26e6bc578ec89 ↗
- https://git.kernel.org/stable/c/24269264c3d59a49eb09b10af2c75b14f2931482 ↗
- https://git.kernel.org/stable/c/36920f30e78e69df01f9691c470b6f3ba8aebf98 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗