Description
In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix potential use after free bug The free_device_compression_mode(iaa_device, device_mode) function frees "device_mode" but it iss passed to iaa_compression_modes[i]->free() a few lines later resulting in a use after free. The good news is that, so far as I can tell, nothing implements the ->free() function and the use after free happens in dead code. But, with this fix, when something does implement it, we'll be ready. :)
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b190447e0fa3ef7355480d641d078962e03768b4 to < b5d534b473e2c8d3e4560be2dd6c12a8eb9d61e9affectedb190447e0fa3ef7355480d641d078962e03768b4 to < c66f0be993ba52410edab06124c54ecf143b05c1affectedb190447e0fa3ef7355480d641d078962e03768b4 to < e0d3b845a1b10b7b5abdad7ecc69d45b2aab3209affected
Linux Linux
Default version status: affected
6.8affected0 to < 6.8unaffected6.10.13 to ≤ 6.10.*unaffected6.11.2 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected