CVE-2024-47751

PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()

Within kirin_pcie_parse_port(), the pcie->num_slots is compared to

pcie->gpio_id_reset size (MAX_PCI_SLOTS) which is correct and would lead

to an overflow.

Thus, fix condition to pcie->num_slots + 1 >= MAX_PCI_SLOTS and move

pcie->num_slots increment below the if-statement to avoid out-of-bounds

array access.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[kwilczynski: commit log]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Published
2024-10-21T12:14Z
EPSS history
Timeline
  • 21 OCT 12:14Z
    PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
    cvelistv5