Lucene search

K
cve416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2022-48632
HistoryApr 28, 2024 - 1:15 p.m.

CVE-2022-48632

2024-04-2813:15:06
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
21
linux kernel
vulnerability
mlxbf_i2c_smbus_start_transaction
stack overflow
memcpy
nvd

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while ‘operation->length’ upper bound
is not checked and ‘data_idx’ also increments.

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%

Related for CVE-2022-48632