15 matches found
I2C driver Heap Buffer Overflow DoS
The vulnerability of the ismtaccess function in the drivers/i2c/busses/i2c-ismt.c module of the I2C driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992435)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992435 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from th...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991281)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991281 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from th...
Linux Distros Unpatched Vulnerability : CVE-2022-50394
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from the user, the variable 'data-block0' may be very large to cause a...
CVE-2022-50394
In the Linux kernel, the following vulnerability has been resolved: i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from the user, the variable 'data-block0' may be very large to cause an out-of-bounds bug. The following log can reveal it: 33.995542 i2c...
DEBIAN-CVE-2022-50394
In the Linux kernel, the following vulnerability has been resolved: i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from the user, the variable 'data-block0' may be very large to cause an out-of-bounds bug. The following log can reveal it: 33.995542 i2c...
kernel: i2c: unbounded length leads to buffer overflow in ismt_access()
A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. In particular, the userspace controllable "data-block0" variable was not capped to a numbe...
PT-2023-33728
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to an out-of-bounds bug in the ismt access function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2023-34662
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to an out-of-bounds bug in the ismt access function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2023-34455
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to an out-of-bounds bug in the ismt access function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2023-34140
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.9 through v5.15.85 Description The issue is related to an out-of-bounds bug in the ismt access function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3....
PT-2025-38342
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ismt access function related to insufficient bounds checking. Specifically, the driver does not validate data received from user space,...
PT-2022-31456
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue concerns memory corruption in the ismt access function, which could potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...
PT-2022-31142
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue concerns memory corruption in the ismt access function, which could potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...
PT-2022-31724
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue is related to memory corruption in the ismt access function, which could potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...