In the Linux kernel, the following vulnerability has been resolved:
iio: magnetometer: rm3100: add boundary check for the value read from RM3100REGTMRC
Recently, we encounter kernel crash in function rm3100commonprobe caused by out of bound access of array rm3100samprates (because of underlying hardware failures). Add boundary check to prevent out of bound access.
[
{
"id": "CVE-2024-26702-07cc4763",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36a49290d7e6d554020057a409747a092b1d3b56",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-1585a9f7",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@792595bab4925aa06532a14dd256db523eb4fa5e",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-1d0e01e0",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57d05dbbcd0b3dc0c252103b43012eef5d6430d1",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-1eba2900",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d5838a473e8e6d812257c69745f5920e4924a60",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-5f3f481f",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1434.0,
"function_hash": "143463792771944548560622958610417171644"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@792595bab4925aa06532a14dd256db523eb4fa5e",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2024-26702-630e7574",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1570.0,
"function_hash": "172533593410458123385770760068017152063"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7200170e88e3ec54d9e9c63f07514c3cead11481",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2024-26702-79ebaf5e",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8c67e94e9e977603473a543d4f322cf2c4aa01",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-7cce4312",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1434.0,
"function_hash": "143463792771944548560622958610417171644"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@176256ff8abff29335ecff905a09fb49e8dcf513",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2024-26702-86730cf9",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1434.0,
"function_hash": "143463792771944548560622958610417171644"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8c67e94e9e977603473a543d4f322cf2c4aa01",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2024-26702-b603f14e",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@176256ff8abff29335ecff905a09fb49e8dcf513",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-c3ccc8c8",
"deprecated": false,
"target": {
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"line_hashes": [
"327722604770011495811141840374132107992",
"98781891085405730647748530715833167664",
"99929655545959040826655990975291808920",
"175666019503453765874415107745023580967",
"150859803818834162155427122782687626151",
"317321953659130759715457288046163154448",
"23334998838482180674959451206787165462",
"303331124951018606561503002943059611086",
"134355510620090434068581559073817494731",
"269986165471907947406917407057585922516"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7200170e88e3ec54d9e9c63f07514c3cead11481",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2024-26702-cb2dc909",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1500.0,
"function_hash": "181801088110224156592715268357960569917"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d5838a473e8e6d812257c69745f5920e4924a60",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2024-26702-dbd5cdb7",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1538.0,
"function_hash": "233054866923227235301187938400642724552"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36a49290d7e6d554020057a409747a092b1d3b56",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2024-26702-e7546865",
"deprecated": false,
"target": {
"function": "rm3100_common_probe",
"file": "drivers/iio/magnetometer/rm3100-core.c"
},
"digest": {
"length": 1434.0,
"function_hash": "143463792771944548560622958610417171644"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57d05dbbcd0b3dc0c252103b43012eef5d6430d1",
"signature_version": "v1",
"signature_type": "Function"
}
]