SUSE CVE-2022-48806

In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 "i2c: i801: Don't silently correct invalid transfer size" revealed that ee1004eepromread did not properly limit how many bytes to read at once. In particular...

PT-2022-28712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.23 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2022-28796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.3 through v5.16.9 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2022-28617

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28653

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.94 through v5.10.100 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...