Re: [PATCH] nvmem: sprd: fix out-of-bounds read in sprd_efuse_read()
From: Srinivas Kandagatla
Date: Fri Sep 18 2026 - 17:58:22 EST
On 9/4/26 1:38 AM, Pradhan, Sanman wrote:
> Read and copy one block at a time, capping each copy to the bytes left
> in the block so it can never exceed sizeof(data), and account for an
> unaligned starting offset. The NVMEM core does not validate offset +
> bytes against the device size, so also reject ranges outside the normal
if it does not then fix is in nvmem core not in provider.
--srini
> eFuse area before issuing any MMIO read. Fixes: 096030e7f449 ("nvmem:
> sprd: Add Spreadtrum SoCs eFuse support") Cc:
> stable@vger.kernel.orgSigned-off-by: Sanman Pradhan
> <psanman@xxxxxxxxxxx>--- Compile-tested only (NVMEM_SPRD_EFUSE,
> ARCH_SPRD || COMPILE_TEST); no Spreadtrum eFuse hardware available for
> runtime testing.