5.5

CVE-2022-48952

PCI: mt7621: Add sentinel to quirks table

In the Linux kernel, the following vulnerability has been resolved:

PCI: mt7621: Add sentinel to quirks table

Current driver is missing a sentinel in the struct soc_device_attribute
array, which causes an oops when assessed by the
soc_device_match(mt7621_pcie_quirks_match) call.

This was only exposed once the CONFIG_SOC_MT7621 mt7621 soc_dev_attr
was fixed to register the SOC as a device, in:

commit 7c18b64bba3b ("mips: ralink: mt7621: do not use kzalloc too early")

Fix it by adding the required sentinel.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 5.4.17 < 5.15.86
LinuxLinux Kernel Version >= 5.16 < 6.0.15
LinuxLinux Kernel Version6.1
LinuxLinux Kernel Version6.1.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.139
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/19098934f910b4d47cb30251dd39ffa57bef9523
Patch
https://git.kernel.org/stable/c/3e9c395ef2d52975b2c2894d2da09d6db2958bc6
Patch
https://git.kernel.org/stable/c/a4997bae1b5b012c8a6e2643e26578a7bc2cae36
Patch
https://git.kernel.org/stable/c/cb7323ece786f243f6d6ccf2e5b2b27b736bdc04
Patch