Description
In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
54e19bc74f3380d414681762ceed9f7245bc6a6e to < 4d04a42b926e682140776e54188f4a44f1f01a81affected54e19bc74f3380d414681762ceed9f7245bc6a6e to < b1e091331920f8fbfc747dcbd16263fcd71abb2daffected54e19bc74f3380d414681762ceed9f7245bc6a6e to < 11e9d163d631198bb3eb41a677a61b499516c0f7affected54e19bc74f3380d414681762ceed9f7245bc6a6e to < 2b70ca92847c619d6264c7372ef74fcbfd1e048caffected54e19bc74f3380d414681762ceed9f7245bc6a6e to < b560521eca03d0a2db6093a5a632cbdd0a0cf833affected54e19bc74f3380d414681762ceed9f7245bc6a6e to < 8a225a6e07a57a1538d53637cb3d82bd3e477839affected54e19bc74f3380d414681762ceed9f7245bc6a6e to < ad297cd2db8953e2202970e9504cab247b6c7cb4affected
Linux Linux
Default version status: affected
4.9affected0 to < 4.9unaffected4.9.277 to ≤ 4.9.*unaffected4.14.241 to ≤ 4.14.*unaffected4.19.199 to ≤ 4.19.*unaffected5.4.135 to ≤ 5.4.*unaffected5.10.53 to ≤ 5.10.*unaffected5.13.5 to ≤ 5.13.*unaffected5.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81 ↗
- https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2d ↗
- https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7 ↗
- https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048c ↗
- https://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833 ↗
- https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839 ↗
- https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4 ↗