CVE - CVE-2022-48927

CVE-ID
CVE-2022-48927	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have indio_dev->num_channels includes all physical channels + timestamp channel. On other side we have an array allocated only for physical channels. So, fix memory corruption by ARRAY_SIZE() instead of num_channels variable. Note the first case is a cleanup rather than a fix as the software timestamp channel bit in active_scanmask is never set by the IIO core.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/082d2c047b0d305bb0b6e9f9d671a09470e2db2d URL:https://git.kernel.org/stable/c/082d2c047b0d305bb0b6e9f9d671a09470e2db2d MISC:https://git.kernel.org/stable/c/0cb9b2f73c182d242a640e512f4785c7c504512f URL:https://git.kernel.org/stable/c/0cb9b2f73c182d242a640e512f4785c7c504512f MISC:https://git.kernel.org/stable/c/b7a78a8adaa8849c02f174d707aead0f85dca0da URL:https://git.kernel.org/stable/c/b7a78a8adaa8849c02f174d707aead0f85dca0da
Assigning CNA
kernel.org
Date Record Created
20240821	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240821)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)