Description
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() In fsl_mc_bus_remove(), mc->root_mc_bus_dev->mc_io is passed to fsl_destroy_mc_io(). However, mc->root_mc_bus_dev is already freed in fsl_mc_device_remove(). Then reference to mc->root_mc_bus_dev->mc_io triggers KASAN use-after-free. To avoid the use-after-free, keep the reference to mc->root_mc_bus_dev->mc_io in a local variable and pass to fsl_destroy_mc_io(). This patch needs rework to apply to kernels older than v5.15.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f93627146f0e371093966ed3d44c065aa077cfb1 to < 720ab105df7bf3eee62d2bddd41526b29d07d045affectedf93627146f0e371093966ed3d44c065aa077cfb1 to < ccd1751092341ac120a961835211f9f2e3735963affectedf93627146f0e371093966ed3d44c065aa077cfb1 to < 161b68b0a728377aaa10a8e14c70e7734f3c9ff7affectedf93627146f0e371093966ed3d44c065aa077cfb1 to < 928ea98252ad75118950941683893cf904541da9affected
Linux Linux
Default version status: affected
4.8affected0 to < 4.8unaffected5.10.248 to ≤ 5.10.*unaffected5.15.49 to ≤ 5.15.*unaffected5.18.6 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected