Catalin Visinescu 0076f35401 drivers/eeprom/i2c_xx24xx: Integer Overflow in I2C EEPROM ee24xx_seek() ...

The function seek which allows the user to move the cursor to a particular
offset in order to read and write from EEPROM storage does not validate the
offset is valid. Later, this can cause an out-of-bounds reads or writes.
Note that newpos may store a large value, larger than the size of the EEPROM.

Similar change in the SPI driver.

Tested locally, builds fine.

Signed-off-by: Catalin Visinescu <catalin_visinescu@yahoo.com>

2026-06-23 10:02:10 +08:00

..

CMakeLists.txt

…

i2c_xx24xx.c

drivers/eeprom/i2c_xx24xx: Integer Overflow in I2C EEPROM ee24xx_seek()

2026-06-23 10:02:10 +08:00

Kconfig

…

Make.defs

…

spi_xx25xx.c

drivers/eeprom/i2c_xx24xx: Integer Overflow in I2C EEPROM ee24xx_seek()

2026-06-23 10:02:10 +08:00