https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:07:17 +0000 https://vulnerability.circl.lu/vuln/cve-2024-44931 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>gpio: prevent potential speculation leaks in gpio_device_get_desc()</p> <p>Userspace may trigger a speculative read of an address outside the gpio descriptor array. Users can do that by calling gpio_ioctl() with an offset out of range. Offset is copied from user and then used as an array index to get the gpio descriptor without sanitization in gpio_device_get_desc().</p> <p>This change ensures that the offset is sanitized by using array_index_nospec() to mitigate any possibility of speculative information leaks.</p> <p>This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>gpio: prevent potential speculation leaks in gpio_device_get_desc()</p> <p>Userspace may trigger a speculative read of an address outside the gpio descriptor array. Users can do that by calling gpio_ioctl() with an offset out of range. Offset is copied from user and then used as an array index to get the gpio descriptor without sanitization in gpio_device_get_desc().</p> <p>This change ensures that the offset is sanitized by using array_index_nospec() to mitigate any possibility of speculative information leaks.</p> <p>This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.</p> https://vulnerability.circl.lu/vuln/cve-2024-44931