Linux Kernel RTL9300 I2C Controller Out-of-Bounds Vulnerability

A vulnerability in the Linux kernel's I2C RTL9300 controller driver allows for out-of-bounds memory access. This issue arises because the 'data->block[0]' variable, which is user-supplied, can be excessively large if not properly validated. The vulnerability has been addressed by implementing a check on the value of 'data->block[0]' before it is used.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, potentially causing memory corruption or allowing for arbitrary code execution.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.