Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
76a6550990e296a7acbb4d33201c9740be912a8c to < 01613f5e4ff6c080260615392338e92e261d109baffected76a6550990e296a7acbb4d33201c9740be912a8c to < ca94597440fa546e56293abe9d0af6c73535d44eaffected76a6550990e296a7acbb4d33201c9740be912a8c to < 30aa348494531adfb043b2e883afc0439e5fcdcaaffected76a6550990e296a7acbb4d33201c9740be912a8c to < 0db2bb3c948ef8b7364768554d6ab5e1544dc441affected76a6550990e296a7acbb4d33201c9740be912a8c to < 11daac2817dca75e3eabb2050bc620c29e686fcdaffected76a6550990e296a7acbb4d33201c9740be912a8c to < 11bb771f3c55b4cef3879e69da4ddecd6085569caffected76a6550990e296a7acbb4d33201c9740be912a8c to < f9ef3f66f4b18078e464b7606f9497e4dbeb9905affected
Linux Linux
Default version status: affected
4.17affected0 to < 4.17unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/01613f5e4ff6c080260615392338e92e261d109b ↗
- https://git.kernel.org/stable/c/ca94597440fa546e56293abe9d0af6c73535d44e ↗
- https://git.kernel.org/stable/c/30aa348494531adfb043b2e883afc0439e5fcdca ↗
- https://git.kernel.org/stable/c/0db2bb3c948ef8b7364768554d6ab5e1544dc441 ↗
- https://git.kernel.org/stable/c/11daac2817dca75e3eabb2050bc620c29e686fcd ↗
- https://git.kernel.org/stable/c/11bb771f3c55b4cef3879e69da4ddecd6085569c ↗
- https://git.kernel.org/stable/c/f9ef3f66f4b18078e464b7606f9497e4dbeb9905 ↗