Bugzilla – Bug 1225270
VUL-0: REJECTED: CVE-2023-52758: kernel: i2c: dev: copy userspace array safely
Last modified: 2024-05-24 15:49:12 UTC
In the Linux kernel, the following vulnerability has been resolved: i2c: dev: copy userspace array safely i2c-dev.c utilizes memdup_user() to copy a userspace array. This is done without an overflow check. Use the new wrapper memdup_array_user() to copy the array more safely. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52758 https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2023/CVE-2023-52758.mbox https://git.kernel.org/stable/c/38ada2f304f6f2065dd59613ef236a26f4dd73cd https://git.kernel.org/stable/c/aff8be2cad74a22525cd89cdff0b72a5c9a4c0c6 https://git.kernel.org/stable/c/fe4eb2157d8c45b127bd88b1376c38c27b741293 https://git.kernel.org/stable/c/bef76b8544939518dafa3325bcd438b111136437 https://git.kernel.org/stable/c/cc9c54232f04aef3a5d7f64a0ece7df00f1aaa3d https://www.cve.org/CVERecord?id=CVE-2023-52758
CVE is REJECTED: https://lore.kernel.org/linux-cve-announce/2024052428-REJECTED-1813@gregkh/