Description
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
647371a6609ddf8700fe151af72e32daebb9baa7 to < 962e565f45dbea77d12a7ed5ef34df8f0c603e28affected647371a6609ddf8700fe151af72e32daebb9baa7 to < 5419be345f32222750e006b85b7f9bae1a285c8eaffected647371a6609ddf8700fe151af72e32daebb9baa7 to < 43c68f52aecd519eb682fa09d57ae52c896f860faffected647371a6609ddf8700fe151af72e32daebb9baa7 to < 29f82a2280e170429370e7a842cde4e70ead8547affected647371a6609ddf8700fe151af72e32daebb9baa7 to < 3837c3f29fbc3b8c12bebf5c62741e2befe3482aaffected
Linux Linux
Default version status: affected
6.3affected0 to < 6.3unaffected6.6.160 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/962e565f45dbea77d12a7ed5ef34df8f0c603e28 ↗
- https://git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8e ↗
- https://git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860f ↗
- https://git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547 ↗
- https://git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482a ↗