Description
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2d66412563ef8953e2bac2d98d2d832b3f3f49cd to < b502fb43f7fb55aaf07f6092ab44657595214b93affectedd833cba201adf9237168e19f0d76e4d7aa69f303 to < bc57f3ef8a9eb0180606696f586a6dcfaa175ed0affectede0db709a58bdeb8966890882261a3f8438c5c9b7 to < 828cd829483f0cda920710997aed79130b0af690affectede3f0c638f428fd66b5871154b62706772045f91a to < d74173bda29aba58f822175d983d07c8ed335494affectede3f0c638f428fd66b5871154b62706772045f91a to < 887a558d0298d36297daea039954c39940228d9baffectede3f0c638f428fd66b5871154b62706772045f91a to < 95e4e0031effad9837af557ecbfd4294a4d8aeeeaffectede3f0c638f428fd66b5871154b62706772045f91a to < ad90d0358bd3b4554f243a425168fc7cebe7d04eaffected02eed6390dbe61115f3e3f63829c95c611aee67baffected5.4.225 to < 5.4.268affected5.10.156 to < 5.10.209affected5.15.80 to < 5.15.148affected6.0.10 to < 6.1affected
Linux Linux
Default version status: affected
6.1affected0 to < 6.1unaffected5.4.268 to ≤ 5.4.*unaffected5.10.209 to ≤ 5.10.*unaffected5.15.148 to ≤ 5.15.*unaffected6.1.75 to ≤ 6.1.*unaffected6.6.14 to ≤ 6.6.*unaffected6.7.2 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b502fb43f7fb55aaf07f6092ab44657595214b93 ↗
- https://git.kernel.org/stable/c/bc57f3ef8a9eb0180606696f586a6dcfaa175ed0 ↗
- https://git.kernel.org/stable/c/828cd829483f0cda920710997aed79130b0af690 ↗
- https://git.kernel.org/stable/c/d74173bda29aba58f822175d983d07c8ed335494 ↗
- https://git.kernel.org/stable/c/887a558d0298d36297daea039954c39940228d9b ↗
- https://git.kernel.org/stable/c/95e4e0031effad9837af557ecbfd4294a4d8aeee ↗
- https://git.kernel.org/stable/c/ad90d0358bd3b4554f243a425168fc7cebe7d04e ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html ↗