Description
In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2dcec7a988a1895540460a0bf5603bab63d5a3ed to < 3c7c806b3eafd94ae0f77305a174d63b69ec187caffected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5ccaffected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < 971b4893457788e0e123ea552f0bb126a5300e61affected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < c3f4f4547fb291982f5ef56c048277c4d5ccc4e4affected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < c43df7dae28fb9fce96ef088250c1e3c3a77c527affected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < b8b84dcdf3ab1d414304819f824b10efba64132caffected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < 6ba6e19912570b2ad68298be0be1dc779014a303affected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < 588bdec1ff8b81517dbae0ae51c9df52c0b952d3affected2dcec7a988a1895540460a0bf5603bab63d5a3ed to < 63e72e551942642c48456a4134975136cdcb9b3caffected
Linux Linux
Default version status: affected
2.6.30affected0 to < 2.6.30unaffected4.19.325 to ≤ 4.19.*unaffected5.4.287 to ≤ 5.4.*unaffected5.10.231 to ≤ 5.10.*unaffected5.15.174 to ≤ 5.15.*unaffected6.1.120 to ≤ 6.1.*unaffected6.6.64 to ≤ 6.6.*unaffected6.11.11 to ≤ 6.11.*unaffected6.12.2 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3c7c806b3eafd94ae0f77305a174d63b69ec187c ↗
- https://git.kernel.org/stable/c/d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc ↗
- https://git.kernel.org/stable/c/971b4893457788e0e123ea552f0bb126a5300e61 ↗
- https://git.kernel.org/stable/c/c3f4f4547fb291982f5ef56c048277c4d5ccc4e4 ↗
- https://git.kernel.org/stable/c/c43df7dae28fb9fce96ef088250c1e3c3a77c527 ↗
- https://git.kernel.org/stable/c/b8b84dcdf3ab1d414304819f824b10efba64132c ↗
- https://git.kernel.org/stable/c/6ba6e19912570b2ad68298be0be1dc779014a303 ↗
- https://git.kernel.org/stable/c/588bdec1ff8b81517dbae0ae51c9df52c0b952d3 ↗
- https://git.kernel.org/stable/c/63e72e551942642c48456a4134975136cdcb9b3c ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗