Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been released, which will cause UAF. Use the xa_lock() to protect the CQ refcount.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9a4435375cd151e07c0c38fa601b00115986091b to < 330c825e66ef65278e4ebe57fd49c1d6f3f4e34eaffected9a4435375cd151e07c0c38fa601b00115986091b to < 763780ef0336a973e933e40e919339381732dcafaffected9a4435375cd151e07c0c38fa601b00115986091b to < 63da190eeb5c9d849b71f457b15b308c94cbaf08affected9a4435375cd151e07c0c38fa601b00115986091b to < 39d26cf46306bdc7ae809ecfdbfeff5aa1098911affected9a4435375cd151e07c0c38fa601b00115986091b to < 37a7559dc1358a8d300437e99ed8ecdab0671507affected9a4435375cd151e07c0c38fa601b00115986091b to < a942ec2745ca864cd8512142100e4027dc306a42affected
Linux Linux
Default version status: affected
4.9affected0 to < 4.9unaffected5.15.168 to ≤ 5.15.*unaffected6.1.93 to ≤ 6.1.*unaffected6.6.33 to ≤ 6.6.*unaffected6.8.12 to ≤ 6.8.*unaffected6.9.3 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/330c825e66ef65278e4ebe57fd49c1d6f3f4e34e ↗
- https://git.kernel.org/stable/c/763780ef0336a973e933e40e919339381732dcaf ↗
- https://git.kernel.org/stable/c/63da190eeb5c9d849b71f457b15b308c94cbaf08 ↗
- https://git.kernel.org/stable/c/39d26cf46306bdc7ae809ecfdbfeff5aa1098911 ↗
- https://git.kernel.org/stable/c/37a7559dc1358a8d300437e99ed8ecdab0671507 ↗
- https://git.kernel.org/stable/c/a942ec2745ca864cd8512142100e4027dc306a42 ↗