CVE-2022-48632

2024-04-2800:00:00

ubuntu.com

linux kernel

stack overflow

mlxbf_i2c

AI Score

7.1

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: i2c:
mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
memcpy() is called in a loop while ‘operation->length’ upper bound is not
checked and ‘data_idx’ also increments.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< anyUNKNOWN
ubuntu22.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws-5.15< anyUNKNOWN
ubuntu22.04noarchlinux-azure< anyUNKNOWN
ubuntu20.04noarchlinux-azure-5.15< anyUNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1030.37.1UNKNOWN
ubuntu20.04noarchlinux-azure-fde-5.15< 5.15.0-1030.37~20.04.1.1UNKNOWN
ubuntu22.04noarchlinux-gcp< anyUNKNOWN
ubuntu20.04noarchlinux-gcp-5.15< anyUNKNOWN
ubuntu22.04noarchlinux-gke< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< any	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< any	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure-fde	< 5.15.0-1030.37.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure-fde-5.15	< 5.15.0-1030.37~20.04.1.1	UNKNOWN
ubuntu	22.04	noarch	linux-gcp	< any	UNKNOWN
ubuntu	20.04	noarch	linux-gcp-5.15	< any	UNKNOWN
ubuntu	22.04	noarch	linux-gke	< any	UNKNOWN