Description
In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driver_private will be freed. But it has been added to the bus, which caused a UAF. To fix it, we need to delete it from the bus when failed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
190888ac01d059e38ffe77a2291d44cafa9016fb to < 5d709f58c743166fe1c6914b9de0ae8868600d9baffected190888ac01d059e38ffe77a2291d44cafa9016fb to < 823f24f2e329babd0330200d0b74882516fe57f4affected190888ac01d059e38ffe77a2291d44cafa9016fb to < cdf1a683a01583bca4b618dd16223cbd6e462e21affected190888ac01d059e38ffe77a2291d44cafa9016fb to < 5389101257828d1913d713d9a40acbe14f5961dfaffected190888ac01d059e38ffe77a2291d44cafa9016fb to < c059665c84feab46b7173d3a1bf36c2fb7f9df86affected190888ac01d059e38ffe77a2291d44cafa9016fb to < 310862e574001a97ad02272bac0fd13f75f42a27affected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected5.4.198 to ≤ 5.4.*unaffected5.10.122 to ≤ 5.10.*unaffected5.15.47 to ≤ 5.15.*unaffected5.17.15 to ≤ 5.17.*unaffected5.18.4 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5d709f58c743166fe1c6914b9de0ae8868600d9b ↗
- https://git.kernel.org/stable/c/823f24f2e329babd0330200d0b74882516fe57f4 ↗
- https://git.kernel.org/stable/c/cdf1a683a01583bca4b618dd16223cbd6e462e21 ↗
- https://git.kernel.org/stable/c/5389101257828d1913d713d9a40acbe14f5961df ↗
- https://git.kernel.org/stable/c/c059665c84feab46b7173d3a1bf36c2fb7f9df86 ↗
- https://git.kernel.org/stable/c/310862e574001a97ad02272bac0fd13f75f42a27 ↗