CVE-2022-48632: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
In the Linux kernel, the following vulnerability has been resolved:
i2c: mlxbf: prevent stack overflow in mlxbfi2csmbusstarttransaction()
memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'dataidx' also increments.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
i2c: mlxbf: prevent stack overflow in mlxbfi2csmbusstarttransaction()
The Linux kernel CVE team has assigned CVE-2022-48632 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024042854-CVE-2022-48632-465f@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48632?
CVE-2022-48632 has a medium severity rating due to the potential for stack overflow vulnerabilities.
How do I fix CVE-2022-48632?
To fix CVE-2022-48632, update your Linux kernel to one of the following versions: 5.10.146, 5.15.71, 5.19.12, or 6.0.
What systems are affected by CVE-2022-48632?
CVE-2022-48632 affects the Linux kernel versions prior to the patched releases mentioned in its fix.
What does CVE-2022-48632 affect?
CVE-2022-48632 affects the i2c subsystem in the Linux kernel, specifically related to stack overflow vulnerabilities.
Is CVE-2022-48632 exploited in the wild?
As of now, there are no known active exploits for CVE-2022-48632 reported in the wild.