Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bbaffectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < e5e0098f8cd82f8b3c8687a8f686309565d51745affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < afe7ea0520c49586703f210865ace2d70b017e48affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < 1e31d2394e0db69541b1591d46c5ad6431c81db3affectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < abe5d7962f09adada9c4fb25b816dddd3f97c55daffectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < e5ebe8544df1a1c3611739a8622156094fe470dfaffectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < 030a8e84f8f1b6e96f469c84a13a225c3699910baffectedca3bf5d47cec8b7614bcb2e9132c40081d6d81db to < fb80117fddb5b477218dc99bb53911b72c3847f8affected
Linux Linux
Default version status: affected
4.7affected0 to < 4.7unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.6 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb ↗
- https://git.kernel.org/stable/c/e5e0098f8cd82f8b3c8687a8f686309565d51745 ↗
- https://git.kernel.org/stable/c/afe7ea0520c49586703f210865ace2d70b017e48 ↗
- https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3 ↗
- https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d ↗
- https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df ↗
- https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b ↗
- https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8 ↗