Messages in this thread | | | Date | Tue, 27 Feb 2024 15:06:36 +0100 | From | Greg Kroah-Hartman <> | Subject | Re: CVE-2021-46934: i2c: validate user data in compat ioctl |
| |
On Tue, Feb 27, 2024 at 02:33:50PM +0100, Carlos López wrote: > Hi, > > On 27/2/24 10:48, Greg Kroah-Hartman wrote: > > Description > > =========== > > > > In the Linux kernel, the following vulnerability has been resolved: > > > > i2c: validate user data in compat ioctl > > > > Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. > > Userspace should not be able to trigger warnings, so this patch adds > > validation checks for user data in compact ioctl to prevent reported > > warnings > > What's the security impact here exactly?
Userspace should never be able to trigger kernel warnings.
| |