CVE-2021-47441

The Linux kernel contains a vulnerability in the mlxsw driver where it fails to reject cooling states set above the maximum supported value. When CONFIG_THERMAL_STATISTICS=y is enabled, providing an out-of-bounds index (e.g., setting a state of 18 when the maximum is 10) results in out-of-bounds ...