CVE-2022-2873

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds memory access flaw was found in the Linux kernel's Intel iSMT SMBus host controller driver. This issue arises when a user triggers the I2C SMBUS BLOCK DATA with malicious input data using the ioctl I2C SMBUS. The flaw allows a local user to crash the system. The vulnerability is related to the incorrect calculation of the buffer size in the ismt access() function when processing the I2C SMBUS BLOCK DATA block data record.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.