In the Linux kernel, the following vulnerability has been resolved:
mmc: core: Avoid negative index with array access
Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.4.269 | 5.4.274 |
| linux / linux_kernel | 5.10.210 | 5.10.215 |
| linux / linux_kernel | 5.15.149 | 5.15.154 |
| linux / linux_kernel | 6.1.76 | 6.1.84 |
| linux / linux_kernel | 6.6.15 | 6.6.24 |
| linux / linux_kernel | 6.7.3 | 6.7.12 |
| linux / linux_kernel | 6.8 | 6.8.3 |
| linux / linux_kernel | 6.9-rc1 | 6.9-rc1.x |
| debian / debian_linux | 10.0 | 10.0.x |