CVE-2021-46965

mtd: physmap: physmap-bt1-rom: Fix unintentional stack access

published February 27, 2024

CVSS
—
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mtd: physmap: physmap-bt1-rom: Fix unintentional stack access

Cast &data to (char *) in order to avoid unintentionally accessing

the stack.

Notice that data is of type u32, so any increment to &data

will be in the order of 4-byte chunks, and this piece of code

is actually intended to be a byte offset.

Addresses-Coverity-ID: 1497765 ("Out-of-bounds access")

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Published
2024-02-27T18:47Z
EPSS history
Timeline
  • 27 FEB 18:47Z
    mtd: physmap: physmap-bt1-rom: Fix unintentional stack access
    cvelistv5