Description
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state Pass the already obtained vlan group pointer to br_mst_vlan_set_state() instead of dereferencing it again. Each caller has already correctly dereferenced it for their context. This change is required for the following suspicious RCU dereference fix. No functional changes intended.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8ca9a750fc711911ef616ceb627d07357b04545e to < 09f4337c27f5bdeb8646a6db91488cc2f7d537ffaffected4488617e5e995a09abe4d81add5fb165674edb59 to < a6cc9e9a651b9861efa068c164ee62dfba68c6caaffectede43dd2b1ec746e105b7db5f9ad6ef14685a615a4 to < d2dc02775fc0c4eacaee833a0637e5958884a8e5affected3a7c1661ae1383364cd6092d851f5e5da64d476b to < 36c92936e868601fa1f43da6758cf55805043509affecteda2b01e65d9ba8af2bb086d3b7288ca53a07249acaffected6.8.12 to < 6.9affected
Linux Linux
Default version status: unaffected
6.1.93 to < 6.1.95affected6.6.33 to < 6.6.35affected6.9.3 to < 6.9.6affected
References
- https://git.kernel.org/stable/c/09f4337c27f5bdeb8646a6db91488cc2f7d537ff ↗
- https://git.kernel.org/stable/c/a6cc9e9a651b9861efa068c164ee62dfba68c6ca ↗
- https://git.kernel.org/stable/c/d2dc02775fc0c4eacaee833a0637e5958884a8e5 ↗
- https://git.kernel.org/stable/c/36c92936e868601fa1f43da6758cf55805043509 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗