CVE-2022-48632
Assigner: Linux
Published: 2024-04-28T12:59:10.481Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while 'operation->length' upper bound
is not checked and 'data_idx' also increments.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: b5b5b32081cd
lessThan: 48ee0a864d1a
status: affected
versionType: git
version: b5b5b32081cd
lessThan: dc2a0c587006
status: affected
versionType: git
version: b5b5b32081cd
lessThan: 3b5ab5fbe69e
status: affected
versionType: git
version: b5b5b32081cd
lessThan: de24aceb07d4
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 5.10
status: affected
version: 0
lessThan: 5.10
status: unaffected
versionType: custom
version: 5.10.146
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.71
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 5.19.12
lessThanOrEqual: 5.19.*
status: unaffected
versionType: custom
version: 6.0
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
x_generator: engine: bippy-d175d3acf727