nluedtke / linux_kernel_cves

Tracking CVEs for the linux Kernel
Apache License 2.0
739 stars 71 forks source link

[DATA] CVE-2022-26490 affects >=4.0-rc1 #257

Closed DerDakon closed 2 years ago

DerDakon commented 2 years ago

Change Type Requested Update

CVE id number CVE-2022-26490

References Links providing information on the CVE. https://github.com/torvalds/linux/commit/26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 https://github.com/torvalds/linux/commit/9dbe776338e7f97483452cc00adf0d527d6900dd

Additional context The checks added in https://github.com/torvalds/linux/commit/4fbcc1a4cb20fe26ad0225679c536c80f1648221 (the commit listed as "fixes") guard the following memcpy() calls. They were introduced in the above mentioned commits, the older one is present since 4.0-rc1, the other one since 4.1-rc1.