In the Linux kernel, the following vulnerability has been resolved:
iio: magnetometer: rm3100: add boundary check for the value read from RM3100REGTMRC
Recently, we encounter kernel crash in function rm3100commonprobe caused by out of bound access of array rm3100samprates (because of underlying hardware failures). Add boundary check to prevent out of bound access.
[ { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36a49290d7e6d554020057a409747a092b1d3b56", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-07cc4763" }, { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@792595bab4925aa06532a14dd256db523eb4fa5e", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-1585a9f7" }, { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57d05dbbcd0b3dc0c252103b43012eef5d6430d1", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-1d0e01e0" }, { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d5838a473e8e6d812257c69745f5920e4924a60", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-1eba2900" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@792595bab4925aa06532a14dd256db523eb4fa5e", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "143463792771944548560622958610417171644", "length": 1434.0 }, "id": "CVE-2024-26702-5f3f481f" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7200170e88e3ec54d9e9c63f07514c3cead11481", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "172533593410458123385770760068017152063", "length": 1570.0 }, "id": "CVE-2024-26702-630e7574" }, { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8c67e94e9e977603473a543d4f322cf2c4aa01", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-79ebaf5e" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@176256ff8abff29335ecff905a09fb49e8dcf513", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "143463792771944548560622958610417171644", "length": 1434.0 }, "id": "CVE-2024-26702-7cce4312" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8c67e94e9e977603473a543d4f322cf2c4aa01", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "143463792771944548560622958610417171644", "length": 1434.0 }, "id": "CVE-2024-26702-86730cf9" }, { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@176256ff8abff29335ecff905a09fb49e8dcf513", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-b603f14e" }, { "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7200170e88e3ec54d9e9c63f07514c3cead11481", "target": { "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "327722604770011495811141840374132107992", "98781891085405730647748530715833167664", "99929655545959040826655990975291808920", "175666019503453765874415107745023580967", "150859803818834162155427122782687626151", "317321953659130759715457288046163154448", "23334998838482180674959451206787165462", "303331124951018606561503002943059611086", "134355510620090434068581559073817494731", "269986165471907947406917407057585922516" ] }, "id": "CVE-2024-26702-c3ccc8c8" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d5838a473e8e6d812257c69745f5920e4924a60", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "181801088110224156592715268357960569917", "length": 1500.0 }, "id": "CVE-2024-26702-cb2dc909" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36a49290d7e6d554020057a409747a092b1d3b56", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "233054866923227235301187938400642724552", "length": 1538.0 }, "id": "CVE-2024-26702-dbd5cdb7" }, { "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57d05dbbcd0b3dc0c252103b43012eef5d6430d1", "target": { "function": "rm3100_common_probe", "file": "drivers/iio/magnetometer/rm3100-core.c" }, "signature_version": "v1", "digest": { "function_hash": "143463792771944548560622958610417171644", "length": 1434.0 }, "id": "CVE-2024-26702-e7546865" } ]