Description
In the Linux kernel, the following vulnerability has been resolved: caif_virtio: fix wrong pointer check in cfv_probe() del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL. Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0d2e1a2926b1839a4b74519e660739b2566c9386 to < 990fff6980d0c1693d60a812f58dbf93eab0473faffected0d2e1a2926b1839a4b74519e660739b2566c9386 to < 7b5fe58959822e6cfa884327cabba6be3b01883daffected0d2e1a2926b1839a4b74519e660739b2566c9386 to < 8e4e08ca4cc634b337bb74bc9a70758fdeda0bcbaffected0d2e1a2926b1839a4b74519e660739b2566c9386 to < 29e0cd296c87240278e2f7ea4cf3f496b60c03afaffected0d2e1a2926b1839a4b74519e660739b2566c9386 to < 90d302619ee7ce5ed0c69c29c290bdccfde66418affected0d2e1a2926b1839a4b74519e660739b2566c9386 to < 56cddf71cce3b15b078e937fadab29962b6f6643affected0d2e1a2926b1839a4b74519e660739b2566c9386 to < 597c27e5f04cb50e56cc9aeda75d3e42b6b89c3eaffected0d2e1a2926b1839a4b74519e660739b2566c9386 to < a466fd7e9fafd975949e5945e2f70c33a94b1a70affected
Linux Linux
Default version status: affected
3.10affected0 to < 3.10unaffected5.4.291 to ≤ 5.4.*unaffected5.10.235 to ≤ 5.10.*unaffected5.15.179 to ≤ 5.15.*unaffected6.1.131 to ≤ 6.1.*unaffected6.6.83 to ≤ 6.6.*unaffected6.12.19 to ≤ 6.12.*unaffected6.13.7 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/990fff6980d0c1693d60a812f58dbf93eab0473f ↗
- https://git.kernel.org/stable/c/7b5fe58959822e6cfa884327cabba6be3b01883d ↗
- https://git.kernel.org/stable/c/8e4e08ca4cc634b337bb74bc9a70758fdeda0bcb ↗
- https://git.kernel.org/stable/c/29e0cd296c87240278e2f7ea4cf3f496b60c03af ↗
- https://git.kernel.org/stable/c/90d302619ee7ce5ed0c69c29c290bdccfde66418 ↗
- https://git.kernel.org/stable/c/56cddf71cce3b15b078e937fadab29962b6f6643 ↗
- https://git.kernel.org/stable/c/597c27e5f04cb50e56cc9aeda75d3e42b6b89c3e ↗
- https://git.kernel.org/stable/c/a466fd7e9fafd975949e5945e2f70c33a94b1a70 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗