title: i2c: validate user data in compat ioctl
description: In the Linux kernel, the following vulnerability has been resolved:
i2c: validate user data in compat ioctl
Wrong user data may cause warning in i2c_transfer(), ex: zero msgs.
Userspace should not be able to trigger warnings, so this patch adds
validation checks for user data in compact ioctl to prevent reported
warnings
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 7d5cb45655f2, lessThan: 407c8708fb1b, status: affected, versionType: git
version: 7d5cb45655f2, lessThan: 9e4a3f47eff4, status: affected, versionType: git
version: 7d5cb45655f2, lessThan: 8d31cbab4c29, status: affected, versionType: git
version: 7d5cb45655f2, lessThan: f68599581067, status: affected, versionType: git
version: 7d5cb45655f2, lessThan: bb436283e25a, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 4.15, status: affected
version: 0, lessThan: 4.15, status: unaffected, versionType: custom
version: 4.19.224, lessThanOrEqual: 4.19.*, status: unaffected, versionType: custom
version: 5.4.170, lessThanOrEqual: 5.4.*, status: unaffected, versionType: custom
version: 5.10.90, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.15.13, lessThanOrEqual: 5.15.*, status: unaffected, versionType: custom
version: 5.16, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
