SB20240608122 - Information disclosure in Linux kernel i2c busses driver
Published: June 8, 2024 Updated: May 13, 2025
Security Bulletin ID
SB20240608122
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2020-36783)
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to information disclosure within the img_i2c_xfer() and img_i2c_init() functions in drivers/i2c/busses/i2c-img-scb.c. A local user can gain access to sensitive information.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/4734c4b1d9573c9d20bbc46cf37dde095ee011b8
- https://git.kernel.org/stable/c/e80ae8bde41266d3b8bf012460b6593851766006
- https://git.kernel.org/stable/c/96c4a03658d661666c360959aa80cdabfe2972ed
- https://git.kernel.org/stable/c/7ee35cde1e810ad6ca589980b9ec2b7b62946a5b
- https://git.kernel.org/stable/c/223125e37af8a641ea4a09747a6a52172fc4b903
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.21
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.119