CVE-2023-52495 soc: qcom: pmic_glink_altmode: fix port sanity check

2024-02-2915:52:12

Linux

www.cve.org

linux kernel

vulnerability

fix

pmic glink altmode driver

port check

memory corruption

AI Score

7.7

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: pmic_glink_altmode: fix port sanity check

The PMIC GLINK altmode driver currently supports at most two ports.

Fix the incomplete port sanity check on notifications to avoid
accessing and corrupting memory beyond the port array if we ever get a
notification for an unsupported port.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/soc/qcom/pmic_glink_altmode.c"
    ],
    "versions": [
      {
        "version": "080b4e24852b",
        "lessThan": "532a5557da68",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "080b4e24852b",
        "lessThan": "d26edf4ee367",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "080b4e24852b",
        "lessThan": "c4fb7d2eac9f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/soc/qcom/pmic_glink_altmode.c"
    ],
    "versions": [
      {
        "version": "6.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.3",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.15",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.3",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]