Description
In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a pointer to the header structure this could lead to an out of bounds memory access. Add the missing check.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ace6d14481386ec6c1b63cc2b24c71433a583dc2 to < 2ce02059ceb6311a33026b62e6e4dc4ed22a3aefaffectedace6d14481386ec6c1b63cc2b24c71433a583dc2 to < 197a4c54d8a94fe2fb7829661b29f0859c10feb5affectedace6d14481386ec6c1b63cc2b24c71433a583dc2 to < d35e4032f16d7621468c8b56816e7935ebf590a7affectedace6d14481386ec6c1b63cc2b24c71433a583dc2 to < 17d79248b4f370663f9d351409a130fc1ed9416daffectedace6d14481386ec6c1b63cc2b24c71433a583dc2 to < b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37caffected
Linux Linux
Default version status: affected
6.6affected0 to < 6.6unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2ce02059ceb6311a33026b62e6e4dc4ed22a3aef ↗
- https://git.kernel.org/stable/c/197a4c54d8a94fe2fb7829661b29f0859c10feb5 ↗
- https://git.kernel.org/stable/c/d35e4032f16d7621468c8b56816e7935ebf590a7 ↗
- https://git.kernel.org/stable/c/17d79248b4f370663f9d351409a130fc1ed9416d ↗
- https://git.kernel.org/stable/c/b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c ↗