CVE-2023-52857
drm/mediatek: Fix coverity issue with unintentional integer overflow
Summary
drm/mediatek: Fix coverity issue with unintentional integer overflow
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Fix coverity issue with unintentional integer overflow
-
Instead of multiplying 2 variable of different types. Change to
assign a value of one variable and then multiply the other variable. -
Add a int variable for multiplier calculation instead of calculating
different types multiplier with dma_addr_t variable directly.
Affected packages
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"5.14.0"},{"fixed":"6.1.132"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.5.12"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.6.0"},{"fixed":"6.6.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-52857 linux Fixed in: 6.1.133-1
- Ubuntu UBUNTU-CVE-2023-52857 linux-hwe-edge
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web lists.debian.org