CVE-2024-50227

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0+

Description: A stack out-of-bounds read issue was reported in the tb retimer scan() function. This occurs because the loop variable is incremented, causing the max value to become 3 instead of 2, resulting in the second loop reading past the array declared on the stack. The issue was identified by KASAN.

Recommendations: For Linux kernel versions prior to 6.11.0+, assign to max directly in the loop body of the tb retimer scan() function to fix the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.