Description
In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a02b9dc90d844cc7df7b63264e7920cc425052d9 to < 19f51c2529339280d2c8c6427cd3e21ddf1ac3f8affecteda02b9dc90d844cc7df7b63264e7920cc425052d9 to < e0355a0ad31a1d677b2a4514206de4902bd550e8affecteda02b9dc90d844cc7df7b63264e7920cc425052d9 to < 41f45e91c92c8480242ea448d54e28c753b13902affecteda02b9dc90d844cc7df7b63264e7920cc425052d9 to < 0d514185ae792d3a1903c8e1a83899aa996705ceaffecteda02b9dc90d844cc7df7b63264e7920cc425052d9 to < 19edcd97727aae9362444a859a24d99a8730cb27affecteda02b9dc90d844cc7df7b63264e7920cc425052d9 to < ffe000217c5068c5da07ccb1c0f8cce7ad767435affected
Linux Linux
Default version status: affected
4.9affected0 to < 4.9unaffected4.14.241 to ≤ 4.14.*unaffected4.19.199 to ≤ 4.19.*unaffected5.4.135 to ≤ 5.4.*unaffected5.10.53 to ≤ 5.10.*unaffected5.13.5 to ≤ 5.13.*unaffected5.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/19f51c2529339280d2c8c6427cd3e21ddf1ac3f8 ↗
- https://git.kernel.org/stable/c/e0355a0ad31a1d677b2a4514206de4902bd550e8 ↗
- https://git.kernel.org/stable/c/41f45e91c92c8480242ea448d54e28c753b13902 ↗
- https://git.kernel.org/stable/c/0d514185ae792d3a1903c8e1a83899aa996705ce ↗
- https://git.kernel.org/stable/c/19edcd97727aae9362444a859a24d99a8730cb27 ↗
- https://git.kernel.org/stable/c/ffe000217c5068c5da07ccb1c0f8cce7ad767435 ↗