Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2019-25162

i2c: Fix a potential use after free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, added Fixes tag]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < e6412ba3b6508bdf9c074d310bf4144afa6aec1aaffected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < 23a191b132cd87f746c62f3dc27da33683d85829affected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < 871a1e94929a27bf6e2cd99523865c840bbc2d87affected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < 81cb31756888bb062e92d2dca21cd629d77a46a9affected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < 35927d7509ab9bf41896b7e44f639504eae08af7affected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < e8e1a046cf87c8b1363e5de835114f2779e2aaf4affected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < 12b0606000d0828630c033bf0c74c748464fe87daffected
  • 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6 to < e4c72c06c367758a14f227c847f9d623f1994ecfaffected

Linux Linux

Default version status: affected

  • 4.3affected
  • 0 to < 4.3unaffected
  • 4.14.291 to ≤ 4.14.*unaffected
  • 4.19.256 to ≤ 4.19.*unaffected
  • 5.4.211 to ≤ 5.4.*unaffected
  • 5.10.137 to ≤ 5.10.*unaffected
  • 5.15.61 to ≤ 5.15.*unaffected
  • 5.18.18 to ≤ 5.18.*unaffected
  • 5.19.2 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References