CVSS 5.5 · Medium EPSS 0,16%
Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
Deskripsi (NVD)
In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem When a configuration file provides an object size that is larger than the driver's known mxt_obj_size(object), the driver intends to discard the extra bytes. The loop iterates using for (i = 0; i < size; i++). Inside the loop, the condition to skip processing extra bytes is: if (i > mxt_obj_size(object)) continue; Since i is a 0-based index, the valid indices for the object are 0 through mxt_obj_size(object) - 1. When i == mxt_obj_size(object), the condition evaluates to false, and the code processes the byte instead of discarding it. This causes the code to calculate byte_offset = reg + i - cfg->start_ofs and writes the byte there, overwriting exactly one byte of the adjacent instance or object. Update the boundary check to skip extra bytes correctly by using >=.
Rincian
- Terbit di NVD
- 19 Juli 2026
- Terakhir diubah
- 30 Oktober 2026
- Status NVD
- Analyzed
- CVSS 3.1
- 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H· uraikan di kalkulator - Jenis kelemahan (CWE)
- CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
- EPSS (30 hari)
- 0,16% peluang dieksploitasi; lebih tinggi dari 4,7% CVE lain
Produk dan versi terdampak
| Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 3.17 hingga sebelum 5.10.259 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.210 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.176 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.143 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.93 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.18.35 |
| linux | linux kernel | Versi 6.19 hingga sebelum 7.0.12 |
| linux | linux kernel | Versi 7.1 rc1 |
| linux | linux kernel | Versi 7.1 rc2 |
| linux | linux kernel | Versi 7.1 rc3 |
| linux | linux kernel | Versi 7.1 rc4 |
| linux | linux kernel | Versi 7.1 rc5 |
Referensi dan perbaikan
- https://git.kernel.org/stable/c/1017e1c6c6c49cccbcda9bbcfa49e50b0b6dad39 patch
- https://git.kernel.org/stable/c/5c3681c3abc35cfac6b702251382312c60d96bc2 patch
- https://git.kernel.org/stable/c/6c6b989b4ebf22b086fdfcac2163b5cb55e34d8f patch
- https://git.kernel.org/stable/c/7f95f4792c0dc767fcb8e405391e779ab419d55a patch
- https://git.kernel.org/stable/c/862a1a32b5190241fce7a7d20229539a3926f31e patch
- https://git.kernel.org/stable/c/ae92e334544263a02d9f99e18385e718c44392c9 patch
- https://git.kernel.org/stable/c/baa0210fb6a9dc3882509a9411b6d284d88fe30e patch
- https://git.kernel.org/stable/c/e9b62996ba537774f68fecfd7eecb5aec1713952 patch