Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event(). Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d5c70627a79455154f5f636096abe6fe57510605 to < 116d1f8805ae2daadbac89d24da4c0da50b9edaeaffectedd5c70627a79455154f5f636096abe6fe57510605 to < 94d158985b6ea011bdc26186f42d662a156da6cbaffectedd5c70627a79455154f5f636096abe6fe57510605 to < 1d24f14e049fdd769146dda026496ed23b397ed9affectedd5c70627a79455154f5f636096abe6fe57510605 to < 9ac3675bf875792dced45efbf47116719a7c097baffectedd5c70627a79455154f5f636096abe6fe57510605 to < 3c374d33f1338dbb5676919c5194caa9c5aa1631affectedd5c70627a79455154f5f636096abe6fe57510605 to < 947eb6f0a274f8b15a0248051a65b069effd5057affected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/116d1f8805ae2daadbac89d24da4c0da50b9edae ↗
- https://git.kernel.org/stable/c/94d158985b6ea011bdc26186f42d662a156da6cb ↗
- https://git.kernel.org/stable/c/1d24f14e049fdd769146dda026496ed23b397ed9 ↗
- https://git.kernel.org/stable/c/9ac3675bf875792dced45efbf47116719a7c097b ↗
- https://git.kernel.org/stable/c/3c374d33f1338dbb5676919c5194caa9c5aa1631 ↗
- https://git.kernel.org/stable/c/947eb6f0a274f8b15a0248051a65b069effd5057 ↗