Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-10764
HistoryJul 27, 2019 - 10:15 p.m.

Code injection

2019-07-2722:15:00
PRIOn knowledge base
www.prio-n.com
1

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.7%

In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the “>” should be “>=” instead.

CPENameOperatorVersion
linux_kernelge4.8
linux_kernellt4.9.6

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.7%