Description
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtp_dev. If ish_probe() fails, the devm-managed device resources including ishtp_dev are freed, but the work is not cancelled, causing a use-after-free when the work function tries to access ishtp_dev. Use devm_work_autocancel() instead, so that the work is automatically cancelled if probe fails.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ae02e5d40d5f829c589412c6253f925e35cf7a22 to < 8c1d378b8c224fd50247625255f09fc01dcc5836affectedae02e5d40d5f829c589412c6253f925e35cf7a22 to < 0a594cb490ca6232671fc09e2dc1a0fc7ccbb0b5affectedae02e5d40d5f829c589412c6253f925e35cf7a22 to < d3ce3afd9f791dd1b7daedfcf8c396b60af5dec0affectedae02e5d40d5f829c589412c6253f925e35cf7a22 to < 8ae2f2b0a28416ed2f6d8478ac8b9f7862f36785affected
Linux Linux
Default version status: affected
4.9affected0 to < 4.9unaffected5.15.105 to ≤ 5.15.*unaffected6.1.22 to ≤ 6.1.*unaffected6.2.9 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected