Threats tagged 'ghsa-6jx6-f56j-v3c4'

A vulnerability in the Linux kernel's arm_scmi firmware component allowed out-of-range device tree (DT) protocol IDs to be processed incorrectly. The issue involved SCMI protocol IDs in message headers exceeding the allowed range defined by MSG_PROTOCOL_ID_MASK. The kernel logged errors for these invalid IDs but continued processing them, which could lead to truncation or misinterpretation of the protocol ID. This flaw affected channel setup and protocol device creation by allowing malformed 32-bit DT reg values to be used improperly. The vulnerability has been resolved by skipping DT protocol nodes with invalid reg values before channel setup or device creation.