In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers might instantiate very early. Remove the comment explaining the obvious while here.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a52f5780> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2424508b40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24246507c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24243dd8c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23549ff040> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23549fe140> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a52f41c0> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d23a52f63c0> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d2424627440> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d23549fd480> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d242a7fe5c0> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d242450a200> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d24243de940> | Operating System |
| linux | linux_kernel | 3.18 | <built-in method update of dict object at 0x7d236440fa00> | Operating System |
| linux | linux_kernel | 7.1 | <built-in method update of dict object at 0x7d23549fd500> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.18:rc7:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* |