Vulnerability feed

Executive summary

The advisory covers a fix in the Linux kernel's ARM System Control and Management Interface (SCMI) sensor driver, where sensor update notifications were not checked for payload size before being parsed. The advisory does not state how severe the issue is, and it does not describe a specific fix recommendation beyond the patch itself.

Technical summary

The flaw is an input validation problem: the SCMI sensor parser read a variable-length array of sensor readings from a SENSOR_UPDATE notification without first confirming the received payload was long enough to contain them. The fix adds length checks that reject truncated update notifications before the array is read. The advisory does not state the attack vector, preconditions, CVSS score, or exploitation status. It does not list affected or fixed version ranges, and it gives no workaround. Detection guidance is not stated beyond the patch diff.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/1bbe431fc59704d…0647516f6f94ddd82564

Score

No CVSS score published.

Affects

LinuxARMLinuxLinux kernelARM SCMI