Description
In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of se_io context in nfc_genl_se_io The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfc_genl_se_io and supposed to be eventually freed in se_io_cb callback function. However, there are several error paths where the bwi_timer is not charged to call se_io_cb later, and the cb_context is leaked. The patch proposes to free the cb_context explicitly on those error paths. At the moment we can't simply check 'dev->ops->se_io()' return value as it may be negative in both cases: when the timer was charged and was not.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5ce3f32b5264b337bfd13a780452a17705307725 to < 5321da6d84b87a34eea441677d649c34bd854169affected5ce3f32b5264b337bfd13a780452a17705307725 to < af452e35b9e6a87cd49e54a7a3d60d934b194651affected5ce3f32b5264b337bfd13a780452a17705307725 to < 271eed1736426103335c5aac50f15b0f4d236bc0affected5ce3f32b5264b337bfd13a780452a17705307725 to < 8978315cb4bf8878c9c8ec05dafd8f7ff539860daffected5ce3f32b5264b337bfd13a780452a17705307725 to < c494365432dcdc549986f4d9af9eb6190cbdb153affected5ce3f32b5264b337bfd13a780452a17705307725 to < b2036a252381949d3b743a3de069324ae3028a57affected5ce3f32b5264b337bfd13a780452a17705307725 to < ba98db08895748c12e5ded52cd1598dce2c79e55affected5ce3f32b5264b337bfd13a780452a17705307725 to < 25ff6f8a5a3b8dc48e8abda6f013e8cc4b14ffeaaffected
Linux Linux
Default version status: affected
3.13affected0 to < 3.13unaffected4.14.308 to ≤ 4.14.*unaffected4.19.276 to ≤ 4.19.*unaffected5.4.235 to ≤ 5.4.*unaffected5.10.173 to ≤ 5.10.*unaffected5.15.100 to ≤ 5.15.*unaffected6.1.18 to ≤ 6.1.*unaffected6.2.5 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5321da6d84b87a34eea441677d649c34bd854169 ↗
- https://git.kernel.org/stable/c/af452e35b9e6a87cd49e54a7a3d60d934b194651 ↗
- https://git.kernel.org/stable/c/271eed1736426103335c5aac50f15b0f4d236bc0 ↗
- https://git.kernel.org/stable/c/8978315cb4bf8878c9c8ec05dafd8f7ff539860d ↗
- https://git.kernel.org/stable/c/c494365432dcdc549986f4d9af9eb6190cbdb153 ↗
- https://git.kernel.org/stable/c/b2036a252381949d3b743a3de069324ae3028a57 ↗
- https://git.kernel.org/stable/c/ba98db08895748c12e5ded52cd1598dce2c79e55 ↗
- https://git.kernel.org/stable/c/25ff6f8a5a3b8dc48e8abda6f013e8cc4b14ffea ↗