CVE-2021-47286

bus: mhi: core: Validate channel ID when processing command completions

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: core: Validate channel ID when processing command completions

MHI reads the channel ID from the event ring element sent by the

device which can be any value between 0 and 255. In order to

prevent any out of bound accesses, add a check against the maximum

number of channels supported by the controller and those channels

not configured yet so as to skip processing of that event ring

element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.1th percentile
Published
2024-05-21T14:34Z
EPSS history
Timeline
  • 21 MAY 14:34Z
    bus: mhi: core: Validate channel ID when processing command completions
    cvelistv5