Description
In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2c_smbus_read_i2c_block_data_or_emulated() returns a value less than the size of the buffer, uninitialized bytes are retained in the buffer and later the buffer is passed on to IIO buffers, potentially leaking memory to userspace. Fix this by adding checks whether the return value of the function is equal to the size of the buffer and subsequently if the value is lesser than zero to distinguish from a returned error code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < 12848f4ded022963944c063e09a192549a4dad1eaffectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < a9cf46054f81972f8c0f1dc2a79d2a141999dbceaffectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < 9f920550abacedc7fc3163dea65ac2a7d0b0765daffectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < 8cf346074533356d67a6a6a43a192328ad341f11affectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < b974566803bceb72f0b9b5f1d7270b79ba963766affectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < 3d57672119525c59ed73ea21accb001ccbcd6cfdaffectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < fb27ebf81136e796c7b719303ef6fd7e1ae5d488affectedbc11ca4a0b84a2f2ebaca2614b92998738d13b1e to < a9a00d727b7bbc5e913a919530a9dd468935bf95affected
Linux Linux
Default version status: affected
4.7affected0 to < 4.7unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/12848f4ded022963944c063e09a192549a4dad1e ↗
- https://git.kernel.org/stable/c/a9cf46054f81972f8c0f1dc2a79d2a141999dbce ↗
- https://git.kernel.org/stable/c/9f920550abacedc7fc3163dea65ac2a7d0b0765d ↗
- https://git.kernel.org/stable/c/8cf346074533356d67a6a6a43a192328ad341f11 ↗
- https://git.kernel.org/stable/c/b974566803bceb72f0b9b5f1d7270b79ba963766 ↗
- https://git.kernel.org/stable/c/3d57672119525c59ed73ea21accb001ccbcd6cfd ↗
- https://git.kernel.org/stable/c/fb27ebf81136e796c7b719303ef6fd7e1ae5d488 ↗
- https://git.kernel.org/stable/c/a9a00d727b7bbc5e913a919530a9dd468935bf95 ↗