ACK: [SRU][M][PATCH 0/1] CVE-2024-26593

[Jacob Martin]

Acked-by: Jacob Martin <jacob.martin at canonical.com>

On 4/8/24 1:35 PM, Bethany Jamison wrote:
> [Impact]
> 
>   In the Linux kernel, the following vulnerability has been resolved:
> 
>   i2c: i801: Fix block process call transactions
> 
>   According to the Intel datasheets, software must reset the block
>   buffer index twice for block process call transactions: once before
>   writing the outgoing data to the buffer, and once again before
>   reading the incoming data from the buffer.
> 
>   The driver is currently missing the second reset, causing the wrong
>   portion of the block buffer to be read.
> 
> [Fix]
> 
> Mantic:	Clean cherry-pick.
> Jammy:	pending
> Focal:	pending
> Bionic:	not-affected
> Xenial:	not-affected
> Trusty:	not-affected
> 
> [Test Case]
> 
> Compile and boot tested.
> 
> [Where problems could occur]
> 
> This fix affects those using the i2c i801 driver, an issue with this
> fix would be visable via unexpected system behavior and potentially
> a crash. This fix has a low risk of regression as it is very
> simple and utilizes code sections that have already been developed.
> 
> Jean Delvare (1):
>    i2c: i801: Fix block process call transactions
> 
>   drivers/i2c/busses/i2c-i801.c | 4 ++--
>   1 file changed, 2 insertions(+), 2 deletions(-)
>