CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the hwmon subsystem, specifically the adm1266 driver, where improper handling of the record_count from the BLACKBOX_INFO response can lead to a buffer overflow. This flaw allows a device to potentially cause memory corruption by reporting a record_count greater than 32, which could be exploited through firmware bugs or communication issues. Organizations using affected Linux systems, particularly those relying on the adm1266 hardware for monitoring, should prioritize applying the patch to mitigate potential security risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm1266_nvmem_read_blackbox() loops over a record_count that comes straight from byte 3 of the BLACKBOX_INFO response. The destination buffer is data->dev_mem, sized for the nvmem cell's declared 2048 bytes (ADM1266_BLACKBOX_MAX_RECORDS * ADM1266_BLACKBOX_SIZE = 32 * 64). A device that reports a record_count greater than 32 -- whether due to firmware bugs, bus corruption, or a non-responsive slave returning 0xff -- would walk read_buff past the end of the dev_mem allocation on the trailing iterations. Cap record_count at ADM1266_BLACKBOX_MAX_RECORDS (introduced here) before entering the loop and return -EIO on any larger value, so a malformed BLACKBOX_INFO response cannot drive the loop out of bounds.