High · published February 26, 2025
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Fix list protocols enumeration in the base protocol
While enumerating protocols implemented by the SCMI platform using
BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is
currently validated in an improper way since the check employs a sum
between unsigned integers that could overflow and cause the check itself
to be silently bypassed if the returned value 'loop_num_ret' is big
enough.
Fix the validation avoiding the addition.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.17, < 4.19.247 | 4.19.247 |
| linux/linux_kernel | ≥ 4.20, < 5.4.198 | 5.4.198 |
| linux/linux_kernel | ≥ 5.5, < 5.10.121 | 5.10.121 |
| linux/linux_kernel | ≥ 5.11, < 5.15.46 | 5.15.46 |
| linux/linux_kernel | ≥ 5.16, < 5.17.14 | 5.17.14 |
| linux/linux_kernel | ≥ 5.18, < 5.18.3 | 5.18.3 |