CVE-2017-18551: Medium severity linux kernel vulnerability
An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2csmbusxferemulated.
Other sources
An out of bounds (OOB) memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length (data->block[0]) greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker with special user privilege (or root) to crash the system or leak kernel internal information.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2017-18551?
CVE-2017-18551 has a moderate severity level due to the potential for out of bounds memory access.
How do I fix CVE-2017-18551?
To mitigate CVE-2017-18551, update to a patched version of the Linux kernel as specified in the vulnerability details.
Which versions of the Linux kernel are affected by CVE-2017-18551?
CVE-2017-18551 affects Linux kernel versions prior to 4.14.15.
Is CVE-2017-18551 specific to any Linux distribution?
Yes, CVE-2017-18551 impacts various distributions including Red Hat and openSUSE.
What component of the Linux kernel is affected by CVE-2017-18551?
CVE-2017-18551 affects the I2C subsystem, specifically the i2c_smbus_xfer_emulated function in the Linux kernel.