In the Linux kernel, the following vulnerability has been resolved:
misc: fastrpc: fix memory corruption on probe
Add the missing sanity check on the probed-session count to avoid corrupting memory beyond the fixed-size slab-allocated session array when there are more than FASTRPCMAXSESSIONS sessions defined in the devicetree.
{ "vanir_signatures": [ { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec186b9f4aa2e6444d5308a6cc268aada7007639", "deprecated": false, "id": "CVE-2022-49952-061da11d", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "274373871968906129183979727791487072682", "274201597252780185127712124635568773540", "148693435483694041669658993172036212570", "200644406558973253206706871611776747692" ] }, "target": { "file": "drivers/misc/fastrpc.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0425c2facd9166fa083f90c9f3187ace0c7837a", "deprecated": false, "id": "CVE-2022-49952-2e2fa13a", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "274373871968906129183979727791487072682", "274201597252780185127712124635568773540", "148693435483694041669658993172036212570", "200644406558973253206706871611776747692" ] }, "target": { "file": "drivers/misc/fastrpc.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec186b9f4aa2e6444d5308a6cc268aada7007639", "deprecated": false, "id": "CVE-2022-49952-4334cb57", "signature_type": "Function", "digest": { "length": 983.0, "function_hash": "10159499341713327914629836010401382888" }, "target": { "file": "drivers/misc/fastrpc.c", "function": "fastrpc_cb_probe" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e33b0f322fecd7a92d9dc186535cdf97940a856", "deprecated": false, "id": "CVE-2022-49952-65ec6aaa", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "274373871968906129183979727791487072682", "274201597252780185127712124635568773540", "148693435483694041669658993172036212570", "200644406558973253206706871611776747692" ] }, "target": { "file": "drivers/misc/fastrpc.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e33b0f322fecd7a92d9dc186535cdf97940a856", "deprecated": false, "id": "CVE-2022-49952-74c050da", "signature_type": "Function", "digest": { "length": 983.0, "function_hash": "10159499341713327914629836010401382888" }, "target": { "file": "drivers/misc/fastrpc.c", "function": "fastrpc_cb_probe" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c99bc901d5eb9fbdd7bd39f625e170ce97390336", "deprecated": false, "id": "CVE-2022-49952-7f74d227", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "274373871968906129183979727791487072682", "274201597252780185127712124635568773540", "148693435483694041669658993172036212570", "200644406558973253206706871611776747692" ] }, "target": { "file": "drivers/misc/fastrpc.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9baa1415d9abdd1e08362ea2dcfadfacee8690b5", "deprecated": false, "id": "CVE-2022-49952-bef74a44", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "274373871968906129183979727791487072682", "274201597252780185127712124635568773540", "148693435483694041669658993172036212570", "200644406558973253206706871611776747692" ] }, "target": { "file": "drivers/misc/fastrpc.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c99bc901d5eb9fbdd7bd39f625e170ce97390336", "deprecated": false, "id": "CVE-2022-49952-cb31e1ac", "signature_type": "Function", "digest": { "length": 983.0, "function_hash": "10159499341713327914629836010401382888" }, "target": { "file": "drivers/misc/fastrpc.c", "function": "fastrpc_cb_probe" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0425c2facd9166fa083f90c9f3187ace0c7837a", "deprecated": false, "id": "CVE-2022-49952-d60a7d8f", "signature_type": "Function", "digest": { "length": 983.0, "function_hash": "10159499341713327914629836010401382888" }, "target": { "file": "drivers/misc/fastrpc.c", "function": "fastrpc_cb_probe" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9baa1415d9abdd1e08362ea2dcfadfacee8690b5", "deprecated": false, "id": "CVE-2022-49952-d8d80150", "signature_type": "Function", "digest": { "length": 983.0, "function_hash": "10159499341713327914629836010401382888" }, "target": { "file": "drivers/misc/fastrpc.c", "function": "fastrpc_cb_probe" } } ] }