Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

[Eugene Teo <eteo () redhat com>]

Eugene Teo wrote:
> This was fixed in upstream by the maintainer, Mauro Carvalho Chehab.
>
> "[PATCH] V4L/DVB (9621): Avoid writing outside shadow.bytes[] array
>
> There were no check about the limits of shadow.bytes array. This offers
> a risk of writing values outside the limits, overriding other data
> areas."
>
> Upstream commit: 494264379d186bf806613d27aafb7d88d42f4212
>
> https://bugzilla.redhat.com/show_bug.cgi?id=471835

If the write operation fails, the device won't be able to decode audio
signals properly, so on further analysis, we probably don't need a CVE
name for this. Take note.

Thanks, Eugene