Received-SPF: pass (google.com: domain of linux-kernel+bounces-83403-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249;
Date: Tue, 27 Feb 2024 15:06:36 +0100
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: Carlos =?iso-8859-1?Q?L=F3pez?= <clopez@suse.de>
Cc: cve@kernel.org, linux-kernel@vger.kernel.org
Subject: Re: CVE-2021-46934: i2c: validate user data in compat ioctl
Message-ID: <2024022720-derived-impish-d245@gregkh>
References: <2024022750-CVE-2021-46934-79c8@gregkh>
 <94330624-1f8b-49b8-8a66-b7adf1f589f4@suse.de>
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <94330624-1f8b-49b8-8a66-b7adf1f589f4@suse.de>

On Tue, Feb 27, 2024 at 02:33:50PM +0100, Carlos L?pez wrote:
> Hi,
> 
> On 27/2/24 10:48, Greg Kroah-Hartman wrote:
> > Description
> > ===========
> > 
> > In the Linux kernel, the following vulnerability has been resolved:
> > 
> > i2c: validate user data in compat ioctl
> > 
> > Wrong user data may cause warning in i2c_transfer(), ex: zero msgs.
> > Userspace should not be able to trigger warnings, so this patch adds
> > validation checks for user data in compact ioctl to prevent reported
> > warnings
> 
> What's the security impact here exactly?

Userspace should never be able to trigger kernel warnings.