CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's I3C subsystem, specifically in the handling of Dynamic Address Assignment (DAA) for Renesas I3C controllers. An out-of-bounds access can occur when the controller reports the number of devices remaining on an empty bus, potentially leading to memory corruption or unexpected behavior. Organizations utilizing Linux systems with Renesas I3C controllers should prioritize this issue to mitigate potential risks associated with device management and system stability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Fix out-of-bounds access for newdevs mask When software initiates DAA (Dynamic Address Assignment), the controller reports the result via the NRSPQP (Normal Response Queue Port Register). The data length field of the response descriptor, which is accessible through the NRSPQP register, indicates the number of devices remaining after DAA. Consequently, when the bus is empty, this field contains the maximum number of devices supported by the controller (8 for the Renesas I3C controller). Adjust the condition that computes the newly discovered devices bitmask to prevent an out-of-bounds when the I3C bus is empty.