In the Linux kernel, the following vulnerability has been resolved:
i2c: validate user data in compat ioctl
Wrong user data may cause warning in i2c_transfer(), ex: zero msgs.
Userspace should not be able to trigger warnings, so this patch adds
validation checks for user data in compact ioctl to prevent reported
warnings
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/i2c/i2c-dev.c"
],
"versions": [
{
"version": "7d5cb45655f2",
"lessThan": "407c8708fb1b",
"status": "affected",
"versionType": "git"
},
{
"version": "7d5cb45655f2",
"lessThan": "9e4a3f47eff4",
"status": "affected",
"versionType": "git"
},
{
"version": "7d5cb45655f2",
"lessThan": "8d31cbab4c29",
"status": "affected",
"versionType": "git"
},
{
"version": "7d5cb45655f2",
"lessThan": "f68599581067",
"status": "affected",
"versionType": "git"
},
{
"version": "7d5cb45655f2",
"lessThan": "bb436283e25a",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/i2c/i2c-dev.c"
],
"versions": [
{
"version": "4.15",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.15",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.224",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.170",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.90",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.13",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.16",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/407c8708fb1bf2d4afc5337ef50635cf540c364b
git.kernel.org/stable/c/8d31cbab4c295d7010ebb729e9d02d0e9cece18f
git.kernel.org/stable/c/9e4a3f47eff476097e0c7faac04d1831fc70237d
git.kernel.org/stable/c/bb436283e25aaf1533ce061605d23a9564447bdf
git.kernel.org/stable/c/f68599581067e8a5a8901ba9eb270b4519690e26