Description
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num_sampling_freq_avail is initialized to the number of flattened integer elements because read_avail() returns the table as a flat array. bmp280_write_sampling_frequency(), however, indexes the same table as a two-dimensional array and uses num_sampling_freq_avail as the number of rows. Convert the flattened element count back to the number of rows before iterating over the table.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to < 05ef1af381a0f4556c7e3c0dc6bc2428d16c707eaffected10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to < 9db6684fab228edd3b8861a172ccbce3236f027aaffected10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to < 4fd5a61e61d6899cbd45728a5fceba49a53c222daffected10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to < 7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1affected10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to < 56c423b233b214182c58c99861899327b45b0d6caffected
Linux Linux
Default version status: affected
6.1affected0 to < 6.1unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.56 to ≤ 6.18.*unaffected7.2.10 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/05ef1af381a0f4556c7e3c0dc6bc2428d16c707e ↗
- https://git.kernel.org/stable/c/9db6684fab228edd3b8861a172ccbce3236f027a ↗
- https://git.kernel.org/stable/c/4fd5a61e61d6899cbd45728a5fceba49a53c222d ↗
- https://git.kernel.org/stable/c/7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1 ↗
- https://git.kernel.org/stable/c/56c423b233b214182c58c99861899327b45b0d6c ↗