SB20241230301 - Input validation error in Linux kernel i3c driver
Published: December 30, 2024 Updated: May 11, 2025
Security Bulletin ID
SB20241230301
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2024-56562)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the i3c_master_put_i3c_addrs() function in drivers/i3c/master.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/093ecc6d82ff1d2e0cbf6f2000438b6c698145cb
- https://git.kernel.org/stable/c/0cb21f1ea3a2e19ee314a8fcf95461b5c453c59e
- https://git.kernel.org/stable/c/0e8ab955c6d06f9d907761c07c02d1492f0a8ac1
- https://git.kernel.org/stable/c/3082990592f7c6d7510a9133afa46e31bbe26533
- https://git.kernel.org/stable/c/991e33a99fd3b5d432f0629565f532f563fe019a
- https://git.kernel.org/stable/c/c2f0ce241154b04f2fc150ff16ad82d9b8fdfa4a
- https://git.kernel.org/stable/c/ce30d11b39e8d637fed4704a5b43e9d556990475
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.64