CVE-2022-48632

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

Published: 4/28/2024 Last updated: 5/4/2025 Reserved: 2/25/2024

In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (2)

Product	Vendor	Version
Linux	Linux	Snapdragon X62 5G Modem-RF System
Linux	Linux	< 10.0.22631.4602

References (8)

https://git.kernel.org/stable/c/48ee0a864d1af02eea98fc825cc230d61517a71e
https://git.kernel.org/stable/c/dc2a0c587006f29b724069740c48654b9dcaebd2
https://git.kernel.org/stable/c/3b5ab5fbe69ebbee5692c72b05071a43fc0655d8
https://git.kernel.org/stable/c/de24aceb07d426b6f1c59f33889d6a964770547b
https://git.kernel.org/stable/c/48ee0a864d1af02eea98fc825cc230d61517a71e
https://git.kernel.org/stable/c/dc2a0c587006f29b724069740c48654b9dcaebd2
https://git.kernel.org/stable/c/3b5ab5fbe69ebbee5692c72b05071a43fc0655d8
https://git.kernel.org/stable/c/de24aceb07d426b6f1c59f33889d6a964770547b