Messages in this thread | | | Date | Tue, 27 Feb 2024 14:33:50 +0100 | Subject | Re: CVE-2021-46934: i2c: validate user data in compat ioctl | From | Carlos López <> |
| |
Hi,
On 27/2/24 10:48, Greg Kroah-Hartman wrote: > Description > =========== > > In the Linux kernel, the following vulnerability has been resolved: > > i2c: validate user data in compat ioctl > > Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. > Userspace should not be able to trigger warnings, so this patch adds > validation checks for user data in compact ioctl to prevent reported > warnings
What's the security impact here exactly?
-- Carlos López Security Engineer SUSE Software Solutions
| |