CVE-2024-44931

gpio: prevent potential speculation leaks in gpio_device_get_desc()

published August 26, 2024

CVSS
—
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gpio: prevent potential speculation leaks in gpio_device_get_desc()

Userspace may trigger a speculative read of an address outside the gpio

descriptor array.

Users can do that by calling gpio_ioctl() with an offset out of range.

Offset is copied from user and then used as an array index to get

the gpio descriptor without sanitization in gpio_device_get_desc().

This change ensures that the offset is sanitized by using

array_index_nospec() to mitigate any possibility of speculative

information leaks.

This bug was discovered and resolved using Coverity Static Analysis

Security Testing (SAST) by Synopsys, Inc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2024-08-26T10:11Z
EPSS history
Timeline
  • 26 AUG 10:11Z
    gpio: prevent potential speculation leaks in gpio_device_get_desc()
    cvelistv5