Description
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never performs any paltform device allocation, thus error path "undo_platform_dev_alloc" is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this will lead to unbalanced device reference counts and premature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f83fca0707c66e36f14efef7f68702cb12de70b7 to < b0979a885b9d4df2a25b88e9d444ccaa5f9f495caffectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < f3498650df0805c75b4e1c94d07423c46cbf4ce1affectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < 6aee4c5635d81f4809c3b9f0c198a65adfbb2adaaffectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < 060f41243ad7f6f5249fa7290dda0c01f723d12daffectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < 4c6735299540f3c82a5033d35be76a5c42e0fb18affectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < e1e5e8ea2731150d5ba7c707f9e02fafebcfeb49affectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < 1de989668708ce5875efc9d669d227212aeb9a90affectedf83fca0707c66e36f14efef7f68702cb12de70b7 to < ddfcfeba891064b88bb844208b43bef2ef970f0caffected
Linux Linux
Default version status: affected
3.18affected0 to < 3.18unaffected4.19.321 to ≤ 4.19.*unaffected5.4.283 to ≤ 5.4.*unaffected5.10.225 to ≤ 5.10.*unaffected5.15.166 to ≤ 5.15.*unaffected6.1.108 to ≤ 6.1.*unaffected6.6.49 to ≤ 6.6.*unaffected6.10.8 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b0979a885b9d4df2a25b88e9d444ccaa5f9f495c ↗
- https://git.kernel.org/stable/c/f3498650df0805c75b4e1c94d07423c46cbf4ce1 ↗
- https://git.kernel.org/stable/c/6aee4c5635d81f4809c3b9f0c198a65adfbb2ada ↗
- https://git.kernel.org/stable/c/060f41243ad7f6f5249fa7290dda0c01f723d12d ↗
- https://git.kernel.org/stable/c/4c6735299540f3c82a5033d35be76a5c42e0fb18 ↗
- https://git.kernel.org/stable/c/e1e5e8ea2731150d5ba7c707f9e02fafebcfeb49 ↗
- https://git.kernel.org/stable/c/1de989668708ce5875efc9d669d227212aeb9a90 ↗
- https://git.kernel.org/stable/c/ddfcfeba891064b88bb844208b43bef2ef970f0c ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗