Description
In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kref_put() function will call nport->release if the refcount drops to zero. The nport->release release function is _efc_nport_free() which frees "nport". But then we dereference "nport" on the next line which is a use after free. Re-order these lines to avoid the use after free.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to < 16a570f07d870a285b0c0b0d1ca4dff79e8aa5ffaffectedfcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to < abc71e89170ed32ecf0a5a29f31aa711e143e941affectedfcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to < baeb8628ab7f4577740f00e439d3fdf7c876b0ffaffectedfcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to < 7c2908985e4ae0ea1b526b3916de9e5351650908affectedfcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to < 98752fcd076a8cbc978016eae7125b4971be1eecaffectedfcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to < 2e4b02fad094976763af08fec2c620f4f8edd9aeaffected
Linux Linux
Default version status: affected
5.14affected0 to < 5.14unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.54 to ≤ 6.6.*unaffected6.10.13 to ≤ 6.10.*unaffected6.11.2 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/16a570f07d870a285b0c0b0d1ca4dff79e8aa5ff ↗
- https://git.kernel.org/stable/c/abc71e89170ed32ecf0a5a29f31aa711e143e941 ↗
- https://git.kernel.org/stable/c/baeb8628ab7f4577740f00e439d3fdf7c876b0ff ↗
- https://git.kernel.org/stable/c/7c2908985e4ae0ea1b526b3916de9e5351650908 ↗
- https://git.kernel.org/stable/c/98752fcd076a8cbc978016eae7125b4971be1eec ↗
- https://git.kernel.org/stable/c/2e4b02fad094976763af08fec2c620f4f8edd9ae ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗