CVE-2021-46934 i2c: validate user data in compat ioctl

2024-02-2709:44:01

Linux

github.com

linux kernel

vulnerability

i2c

user data

compat ioctl

warning

userspace

patch

validation checks

6.6 Medium

AI Score

Confidence

Low

JSON

In the Linux kernel, the following vulnerability has been resolved:

i2c: validate user data in compat ioctl

Wrong user data may cause warning in i2c_transfer(), ex: zero msgs.
Userspace should not be able to trigger warnings, so this patch adds
validation checks for user data in compact ioctl to prevent reported
warnings

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "7d5cb45655f2",
        "lessThan": "407c8708fb1b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "7d5cb45655f2",
        "lessThan": "9e4a3f47eff4",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "7d5cb45655f2",
        "lessThan": "8d31cbab4c29",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "7d5cb45655f2",
        "lessThan": "f68599581067",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "7d5cb45655f2",
        "lessThan": "bb436283e25a",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/i2c/i2c-dev.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.15"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.15",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "4.19.224",
        "versionType": "custom",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.170",
        "versionType": "custom",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.90",
        "versionType": "custom",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.13",
        "versionType": "custom",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "5.16",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/i2c/i2c-dev.c"
    ],
    "defaultStatus": "affected"
  }
]