Riskcovery

CVE-2021-46934

i2c: validate user data in compat ioctl

State
Published
Severity
Not scored
Published
Feb 27, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: validate user data in compat ioctl

Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to prevent reported warnings

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b to before 407c8708fb1bf2d4afc5337ef50635cf540c364bAffected
  • 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b to before 9e4a3f47eff476097e0c7faac04d1831fc70237dAffected
  • 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b to before 8d31cbab4c295d7010ebb729e9d02d0e9cece18fAffected
  • 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b to before f68599581067e8a5a8901ba9eb270b4519690e26Affected
  • 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b to before bb436283e25aaf1533ce061605d23a9564447bdfAffected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 4.19.224 through 4.19.*Not affected
  • 5.4.170 through 5.4.*Not affected
  • 5.10.90 through 5.10.*Not affected
  • 5.15.13 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.