Description
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block s_input when F54 queue is busy Changing the input (diagnostic report type) mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input while streaming could lead to a heap buffer overflow if the new size is larger than the allocated buffers. Prevent this by blocking VIDIOC_S_INPUT with -EBUSY if the V4L2 queue is busy (streaming).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 7e994a9ecc0b49ad2fe63da9c92a8aca8a6614afaffected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < fa69f93015becf3729716de2199b58540aa99672affected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 493ba8e794729649689438edba72337111303cc4affected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 1d718f1461766e9f00a8dbeb4f13f1b1c19d90acaffected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < cae79513f9115c350561b16f36adcb47c9bfff12affected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < ff0849705d29277fd1f6fc6596674b9308724fb2affected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < ddd9a53faf3b65e5920cb802cb1db6f4615bdfefaffected3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < fbfd76746adc16d64be29ff113f673b70bc3f5c2affected
Linux Linux
Default version status: affected
4.9affected0 to < 4.9unaffected5.10.266 to ≤ 5.10.*unaffected5.15.217 to ≤ 5.15.*unaffected6.1.184 to ≤ 6.1.*unaffected6.6.153 to ≤ 6.6.*unaffected6.12.105 to ≤ 6.12.*unaffected6.18.46 to ≤ 6.18.*unaffected7.1.10 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7e994a9ecc0b49ad2fe63da9c92a8aca8a6614af ↗
- https://git.kernel.org/stable/c/fa69f93015becf3729716de2199b58540aa99672 ↗
- https://git.kernel.org/stable/c/493ba8e794729649689438edba72337111303cc4 ↗
- https://git.kernel.org/stable/c/1d718f1461766e9f00a8dbeb4f13f1b1c19d90ac ↗
- https://git.kernel.org/stable/c/cae79513f9115c350561b16f36adcb47c9bfff12 ↗
- https://git.kernel.org/stable/c/ff0849705d29277fd1f6fc6596674b9308724fb2 ↗
- https://git.kernel.org/stable/c/ddd9a53faf3b65e5920cb802cb1db6f4615bdfef ↗
- https://git.kernel.org/stable/c/fbfd76746adc16d64be29ff113f673b70bc3f5c2 ↗