CVE-2023-52495 soc: qcom: pmic_glink_altmode: fix port sanity check

2024-02-2915:52:12

Linux

www.cve.org

linux kernel

vulnerability

fix

pmic glink altmode driver

port check

memory corruption

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: pmic_glink_altmode: fix port sanity check

The PMIC GLINK altmode driver currently supports at most two ports.

Fix the incomplete port sanity check on notifications to avoid
accessing and corrupting memory beyond the port array if we ever get a
notification for an unsupported port.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/soc/qcom/pmic_glink_altmode.c"
    ],
    "versions": [
      {
        "version": "080b4e24852b",
        "lessThan": "532a5557da68",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "080b4e24852b",
        "lessThan": "d26edf4ee367",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "080b4e24852b",
        "lessThan": "c4fb7d2eac9f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/soc/qcom/pmic_glink_altmode.c"
    ],
    "versions": [
      {
        "version": "6.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.3",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.15",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.3",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]