Description
In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release() in /drivers/base/core.c, a device without a release function is a broken device and must be fixed. The current code directly frees the device after calling device_add() without waiting for other kernel parts to release their references. Thus, a reference could still be held to a struct device, e.g., by sysfs, leading to potential use-after-free issues if a proper release function is not set.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8c81ba20349daf9f7e58bb05a0c12f4b71813a30 to < 940d15254d2216b585558bcf36312da50074e711affected8c81ba20349daf9f7e58bb05a0c12f4b71813a30 to < 0505ff2936f166405d81d0d454a81d9c14124344affected8c81ba20349daf9f7e58bb05a0c12f4b71813a30 to < e26e8ac27351f457091459a0a355bacd06d5bb2baffected8c81ba20349daf9f7e58bb05a0c12f4b71813a30 to < 915e34d5ad35a6a9e56113f852ade4a730fb88f0affected
Linux Linux
Default version status: affected
6.3affected0 to < 6.3unaffected6.6.80 to ≤ 6.6.*unaffected6.12.17 to ≤ 6.12.*unaffected6.13.5 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected