pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.19 % · centile 8 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 The config passed in by pad wakeup is 1, when num_configs is 1, Configuration [1] should not be fetched, which will be detected by KASAN as a memory out of bounds condition. Modify to get configs[1] when num_configs is 2.
Références
Références européennes
- ENISA EUVD · EUVD-2023-60078
- GCVE · GCVE-0-2023-53750
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 3e84956605aca55a8c4280f0cf6230905c6f237d < 0d200240038bc40b1b073a3fd978764c829af77f ; affected f60c9eac54af28d7b5651fe49944bfd5098550e6 < f85d3cb10f4df5ae3bdb9a9357315c28d781651f ; affected f60c9eac54af28d7b5651fe49944bfd5098550e6 < 27d9a7585b594bb2f9bb1f65e0003814fcc69c75 ; affected f60c9eac54af28d7b5651fe49944bfd5098550e6 < 9063777ca1e2e895c5fdd493ee0c3f18fa710ed4 |
| Linux · Linux | affected 6.2 ; unaffected 0 < 6.2 ; unaffected 6.3.13 ≤ 6.3.* ; unaffected 6.4.4 ≤ 6.4.* ; unaffected 6.5 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |