Description
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix use_count leakage when handling boot-on I found a use_count leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
dc1b1d7faf616ed663d0bba9be5abb4d1ed35d01 to < dc3391d49479bc2bf8a2b88dbf86fdd800882feeaffectedf44b07472f29ae313ce875dc7b9c75b100c608b8 to < 5bfc53df288e8ea54ca6866fb92034214940183faffected089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to < 4b737246ff50f810d6ab4be13c1388a07f0c14b1affected089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to < feb847e6591e8c7a09cc39721cc9ca74fd9a5d80affected089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to < 4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347affected089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to < bc6c381df5793ebcf32db88a3e65acf7870379fcaffected089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to < 0591b14ce0398125439c759f889647369aa616a0affected4.19.226 to < 4.19.270affected5.4.7 to < 5.4.229affected
Linux Linux
Default version status: affected
5.5affected0 to < 5.5unaffected4.19.270 to ≤ 4.19.*unaffected5.4.229 to ≤ 5.4.*unaffected5.10.163 to ≤ 5.10.*unaffected5.15.86 to ≤ 5.15.*unaffected6.0.16 to ≤ 6.0.*unaffected6.1.2 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/dc3391d49479bc2bf8a2b88dbf86fdd800882fee ↗
- https://git.kernel.org/stable/c/5bfc53df288e8ea54ca6866fb92034214940183f ↗
- https://git.kernel.org/stable/c/4b737246ff50f810d6ab4be13c1388a07f0c14b1 ↗
- https://git.kernel.org/stable/c/feb847e6591e8c7a09cc39721cc9ca74fd9a5d80 ↗
- https://git.kernel.org/stable/c/4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347 ↗
- https://git.kernel.org/stable/c/bc6c381df5793ebcf32db88a3e65acf7870379fc ↗
- https://git.kernel.org/stable/c/0591b14ce0398125439c759f889647369aa616a0 ↗