SB2024060861 - Information disclosure in Linux kernel i2c driver
Published: June 8, 2024 Updated: May 13, 2025
Security Bulletin ID
SB2024060861
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2021-47425)
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to information disclosure within the i2c_acpi_notify() function in drivers/i2c/i2c-core-acpi.c. A local user can gain access to sensitive information.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/b8090a84d7758b929d348bafbd86bb7a10c5fb63
- https://git.kernel.org/stable/c/3d9d458a8aaafa47268ea4f1b4114a9f12927989
- https://git.kernel.org/stable/c/60bacf259e8c2eb2324f3e13275200baaee9494b
- https://git.kernel.org/stable/c/f86de018fd7a24ee07372d55ffa7824f0c674a95
- https://git.kernel.org/stable/c/90f1077c9184ec2ae9989e4642f211263f301694
- https://git.kernel.org/stable/c/6558b646ce1c2a872fe1c2c7cb116f05a2c1950f
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.251
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.211
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.73
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.153