Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fix information leak The write() callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspan_pda implementation will however return the number characters submitted to the device if the write urb is not already in use. If this number is larger than the number of characters passed to write(), the line discipline continues writing data from beyond the tty write buffer. Fix the information leak by making sure that keyspan_pda_write_start() returns zero on success as intended.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
034e38e8f68767fb5438ae3e608ee82919674177 to < b069b7029862fafaff331d4c664d97d4ae828d6daffected034e38e8f68767fb5438ae3e608ee82919674177 to < e52ca411f50539ff1d0c877b9312771ca8a858c1affected034e38e8f68767fb5438ae3e608ee82919674177 to < 2f7a6b8ab3845bd1da02604f1a874b52a4555a72affected034e38e8f68767fb5438ae3e608ee82919674177 to < e1494191a3aac665d3a2fce16169a97c346253ecaffected034e38e8f68767fb5438ae3e608ee82919674177 to < cf6ca0aefae03958cfb5b189b0adbfb25c06bfacaffected034e38e8f68767fb5438ae3e608ee82919674177 to < d4b12b6b395e43a2b1d80be3745631fcaa9c047baffected034e38e8f68767fb5438ae3e608ee82919674177 to < 6bfc8d01ac4068eced509f8fc74d0cd205e4dcecaffected02407bc7d42347da7ed2a3926a0b824bfc614914affected5.10.266 to < 5.11affected
Linux Linux
Default version status: affected
5.11affected0 to < 5.11unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.96 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b069b7029862fafaff331d4c664d97d4ae828d6d ↗
- https://git.kernel.org/stable/c/e52ca411f50539ff1d0c877b9312771ca8a858c1 ↗
- https://git.kernel.org/stable/c/2f7a6b8ab3845bd1da02604f1a874b52a4555a72 ↗
- https://git.kernel.org/stable/c/e1494191a3aac665d3a2fce16169a97c346253ec ↗
- https://git.kernel.org/stable/c/cf6ca0aefae03958cfb5b189b0adbfb25c06bfac ↗
- https://git.kernel.org/stable/c/d4b12b6b395e43a2b1d80be3745631fcaa9c047b ↗
- https://git.kernel.org/stable/c/6bfc8d01ac4068eced509f8fc74d0cd205e4dcec ↗