title: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access
description: In the Linux kernel, the following vulnerability has been resolved:
mtd: physmap: physmap-bt1-rom: Fix unintentional stack access
Cast &data to (char *) in order to avoid unintentionally accessing
the stack.
Notice that data is of type u32, so any increment to &data
will be in the order of 4-byte chunks, and this piece of code
is actually intended to be a byte offset.
Addresses-Coverity-ID: 1497765 ("Out-of-bounds access")
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: b3e79e7682e0, lessThan: 34ec706bf0b7, status: affected, versionType: git
version: b3e79e7682e0, lessThan: 4e4ebb827bf0, status: affected, versionType: git
version: b3e79e7682e0, lessThan: 4d786870e326, status: affected, versionType: git
version: b3e79e7682e0, lessThan: 683313993dbe, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 5.10, status: affected
version: 0, lessThan: 5.10, status: unaffected, versionType: custom
version: 5.10.36, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.11.20, lessThanOrEqual: 5.11.*, status: unaffected, versionType: custom
version: 5.12.3, lessThanOrEqual: 5.12.*, status: unaffected, versionType: custom
version: 5.13, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
