Description
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter (TX) electrode count was incorrectly assigned the value of the receiver (RX) electrode count due to copy-paste typos. This incorrect value was then propagated to the driver data and used by F54 to determine the diagnostics report size. On devices with more RX than TX electrodes, this inflated the perceived TX count, leading to incorrect report size calculations and potential out-of-bounds buffer accesses. Fix the typos by correctly assigning the TX electrode counts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6adba43fd222ea362c36296d1a6897c2e28fdc8e to < 6484e00d6778fdf2209cd75940bc3902b276457faffected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < db4e20265ebda729610ca5cf45ca9437462c3f36affected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < a6d9646e77da7cab2dff7043a8e9f75e23b836bcaffected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < 0739c65e799d4a93fe573ed23255a71fcfcc5438affected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < 9759502f5cd71805923457f183ae5b9533e20c7baffected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < 9b184c8337c6e12df129399007735a7fbcbbcb7baffected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < a81cafe3c3c2f8494063385a7b0ea7ff407bf19faffected6adba43fd222ea362c36296d1a6897c2e28fdc8e to < 6058f0fea10f3caf63a435677358d1b8e9325114affected
Linux Linux
Default version status: affected
4.10affected0 to < 4.10unaffected5.10.266 to ≤ 5.10.*unaffected5.15.217 to ≤ 5.15.*unaffected6.1.184 to ≤ 6.1.*unaffected6.6.153 to ≤ 6.6.*unaffected6.12.105 to ≤ 6.12.*unaffected6.18.46 to ≤ 6.18.*unaffected7.1.10 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6484e00d6778fdf2209cd75940bc3902b276457f ↗
- https://git.kernel.org/stable/c/db4e20265ebda729610ca5cf45ca9437462c3f36 ↗
- https://git.kernel.org/stable/c/a6d9646e77da7cab2dff7043a8e9f75e23b836bc ↗
- https://git.kernel.org/stable/c/0739c65e799d4a93fe573ed23255a71fcfcc5438 ↗
- https://git.kernel.org/stable/c/9759502f5cd71805923457f183ae5b9533e20c7b ↗
- https://git.kernel.org/stable/c/9b184c8337c6e12df129399007735a7fbcbbcb7b ↗
- https://git.kernel.org/stable/c/a81cafe3c3c2f8494063385a7b0ea7ff407bf19f ↗
- https://git.kernel.org/stable/c/6058f0fea10f3caf63a435677358d1b8e9325114 ↗