CVE - CVE-2021-47172

CVE-ID
CVE-2021-47172	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers Channel numbering must start at 0 and then not have any holes, or it is possible to overflow the available storage. Note this bug was introduced as part of a fix to ensure we didn't rely on the ordering of child nodes. So we need to support arbitrary ordering but they all need to be there somewhere. Note I hit this when using qemu to test the rest of this series. Arguably this isn't the best fix, but it is probably the most minimal option for backporting etc. Alexandru's sign-off is here because he carried this patch in a larger set that Jonathan then applied.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/26da8040eccc6c6b0e415e9a3baf72fd39eb2fdc URL:https://git.kernel.org/stable/c/26da8040eccc6c6b0e415e9a3baf72fd39eb2fdc MISC:https://git.kernel.org/stable/c/f2a772c51206b0c3f262e4f6a3812c89a650191b URL:https://git.kernel.org/stable/c/f2a772c51206b0c3f262e4f6a3812c89a650191b MISC:https://git.kernel.org/stable/c/f49149964d2423fb618fb6b755bb1eaa431cca2c URL:https://git.kernel.org/stable/c/f49149964d2423fb618fb6b755bb1eaa431cca2c MISC:https://git.kernel.org/stable/c/f70122825076117787b91e7f219e21c09f11a5b9 URL:https://git.kernel.org/stable/c/f70122825076117787b91e7f219e21c09f11a5b9
Assigning CNA
kernel.org
Date Record Created
20240325	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240325)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)