power: supply: core: fix supplied_from allocations
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
power: supply: core: fix supplied_from allocations
If dts property power-supplies has multiple values, then accessing to
psy->supplied_from[i-1] in __power_supply_populate_supplied_from will
overrun supplied_from array.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4bhttps://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05ahttps://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367ehttps://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe