CVEvulnerability

CVE-2024-26593

7.1 HIGH Published 2024-02-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-23
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions According to the Intel datasheets, software must reset the block buffer index twice for block process call transactions: once before writing the outgoing data to the buffer, and once again before reading the incoming data from the buffer. The driver is currently missing the second reset, causing the wrong portion of the block buffer to be read.

Affected configurations

• linux linux kernel (>= 5.3.0 < 5.4.269) • linux linux kernel (>= 5.5.0 < 5.10.210) • linux linux kernel (>= 5.11.0 < 5.15.149) • linux linux kernel (>= 5.16.0 < 6.1.79) • linux linux kernel (>= 6.2.0 < 6.6.18) • linux linux kernel (>= 6.7.0 < 6.7.6)

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References