In the Linux kernel, the following vulnerability has been resolved: i2c/designware: Fix an initialization issue The i2cdwxferinit() function requires msgs and msgwriteidx from the dev context to be initialized. amdi2cdwxferquirk() inits msgs and msgsnum, but not msgwriteidx. This could allow an out of bounds access (of msgs). Initialize msgwriteidx before calling i2cdwxfer_init().