CVE-2016-10907

An out-of-bounds flaw was found in the Industrial I/O Subsystem of the Linux kernel. A comparison for devnr limits is exceeded by one, where the current implementation allowed 0 to AD5755_NUM_CHANNELS, while the actual limit should have been till ‘AD5755_NUM_CHANNELS - 1’. This could lead to an out of bounds write to pdata->dac[devnr]. The highest risk from this vulnerability is system availability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.