Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add checks for the expected response length before accessing the buffers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
628329d52474323938a03826941e166bc7c8eff4 to < bbafb75cd9da50d86335cbd98b8b3492bb5e42a6affected628329d52474323938a03826941e166bc7c8eff4 to < 3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3eaffected628329d52474323938a03826941e166bc7c8eff4 to < 89cf4d18ff87efa5c47ba38de36aea5c03f98b05affected628329d52474323938a03826941e166bc7c8eff4 to < f7f5afeed31baaca0b027c2d46a25ee86fb4c9daaffected628329d52474323938a03826941e166bc7c8eff4 to < dc9fdb538ce5b7f32540991f4a25ab63fab7ba07affected628329d52474323938a03826941e166bc7c8eff4 to < f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0affected628329d52474323938a03826941e166bc7c8eff4 to < f3c63aecca90be42b66cdc66de7c4a6104104d17affected628329d52474323938a03826941e166bc7c8eff4 to < 48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79caffected
Linux Linux
Default version status: affected
3.10affected0 to < 3.10unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/bbafb75cd9da50d86335cbd98b8b3492bb5e42a6 ↗
- https://git.kernel.org/stable/c/3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e ↗
- https://git.kernel.org/stable/c/89cf4d18ff87efa5c47ba38de36aea5c03f98b05 ↗
- https://git.kernel.org/stable/c/f7f5afeed31baaca0b027c2d46a25ee86fb4c9da ↗
- https://git.kernel.org/stable/c/dc9fdb538ce5b7f32540991f4a25ab63fab7ba07 ↗
- https://git.kernel.org/stable/c/f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0 ↗
- https://git.kernel.org/stable/c/f3c63aecca90be42b66cdc66de7c4a6104104d17 ↗
- https://git.kernel.org/stable/c/48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c ↗