Description
In the Linux kernel, the following vulnerability has been resolved: mm/slab: make __free(kfree) accept error pointers Currently, if an automatically freed allocation is an error pointer that will lead to a crash. An example of this is in wm831x_gpio_dbg_show(). 171 char *label __free(kfree) = gpiochip_dup_line_label(chip, i); 172 if (IS_ERR(label)) { 173 dev_err(wm831x->dev, "Failed to duplicate label\n"); 174 continue; 175 } The auto clean up function should check for error pointers as well, otherwise we're going to keep hitting issues like this.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
af53aaf20722d745a69a051114a1ae237f5b922e to < edca32f87329d6e341d2143a3b58ec254e8f6b88affectedf550466949e822afcd0b546a4fc35795930660bc to < 946771c2a2b1150f9b7286feadc3aa1e15a1eb16affected3c6cc62ce1265aa5623e2e1b29c0fe258bf6e232 to < 9f6eb0ab4f95240589ee85fd9886a944cd3645b2affected54da6a0924311c7cf5015533991e44fb8eb12773 to < ac6cf3ce9b7d12acb7b528248df5f87caa25fcdcaffected54da6a0924311c7cf5015533991e44fb8eb12773 to < 79cbe0be6c0317b215ddd8bd3e32f0afdac48543affected54da6a0924311c7cf5015533991e44fb8eb12773 to < cd7eb8f83fcf258f71e293f7fc52a70be8ed0128affected6.1.79 to < 6.1.91affected
Linux Linux
Default version status: affected
6.5affected0 to < 6.5unaffected6.1.91 to ≤ 6.1.*unaffected6.6.31 to ≤ 6.6.*unaffected6.8.10 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/edca32f87329d6e341d2143a3b58ec254e8f6b88 ↗
- https://git.kernel.org/stable/c/946771c2a2b1150f9b7286feadc3aa1e15a1eb16 ↗
- https://git.kernel.org/stable/c/9f6eb0ab4f95240589ee85fd9886a944cd3645b2 ↗
- https://git.kernel.org/stable/c/ac6cf3ce9b7d12acb7b528248df5f87caa25fcdc ↗
- https://git.kernel.org/stable/c/79cbe0be6c0317b215ddd8bd3e32f0afdac48543 ↗
- https://git.kernel.org/stable/c/cd7eb8f83fcf258f71e293f7fc52a70be8ed0128 ↗