Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during unregistering where the sysctl attributes were usable after the info struct was freed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
753375a881caa01112b7cec2c796749154e0bb23 to < 2d97b85eb5a86766ad0f8ea3d121e6ae144e3ed8affected753375a881caa01112b7cec2c796749154e0bb23 to < 2a9c40c72097b583b23aeb2a26d429ccfc81fbc1affected753375a881caa01112b7cec2c796749154e0bb23 to < 36bfefb6baaa8e46de44f4fd919ce4347337620faffected753375a881caa01112b7cec2c796749154e0bb23 to < 872cd2d029d2c970a8a1eea88b48dab2b3f2e93aaffected753375a881caa01112b7cec2c796749154e0bb23 to < 4684d69b9670a83992189f6271dc0fcdec4ed0d7affected753375a881caa01112b7cec2c796749154e0bb23 to < 95cdd538e0e5677efbdf8aade04ec098ab98f457affected
Linux Linux
Default version status: affected
4.10affected0 to < 4.10unaffected5.15.209 to ≤ 5.15.*unaffected6.1.120 to ≤ 6.1.*unaffected6.6.55 to ≤ 6.6.*unaffected6.10.14 to ≤ 6.10.*unaffected6.11.3 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2d97b85eb5a86766ad0f8ea3d121e6ae144e3ed8 ↗
- https://git.kernel.org/stable/c/2a9c40c72097b583b23aeb2a26d429ccfc81fbc1 ↗
- https://git.kernel.org/stable/c/36bfefb6baaa8e46de44f4fd919ce4347337620f ↗
- https://git.kernel.org/stable/c/872cd2d029d2c970a8a1eea88b48dab2b3f2e93a ↗
- https://git.kernel.org/stable/c/4684d69b9670a83992189f6271dc0fcdec4ed0d7 ↗
- https://git.kernel.org/stable/c/95cdd538e0e5677efbdf8aade04ec098ab98f457 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗