Description
In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < 90eb79c4ed98a4e24a62ccf61c199ab0f680fa8faffecteda590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < d0b7f11dd68b593bd970e5735be00e8d89bace30affecteda590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < 3becc659f9cb76b481ad1fb71f54d5c8d6332d3faffecteda590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < c9d2b9a80d06a58f37e0dc8c827075639b443927affecteda590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < fe1bebd0edb22e3536cbc920ec713331d1367ad4affecteda590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < 08680c4dadc6e736c75bc2409d833f03f9003c51affecteda590d0fdbaa56f482ff515e1040b6d9b1b200d63 to < 72c7d62583ebce7baeb61acce6057c361f73be4aaffected
Linux Linux
Default version status: affected
5.0affected0 to < 5.0unaffected5.10.241 to ≤ 5.10.*unaffected5.15.192 to ≤ 5.15.*unaffected6.1.140 to ≤ 6.1.*unaffected6.6.92 to ≤ 6.6.*unaffected6.12.30 to ≤ 6.12.*unaffected6.14.8 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/90eb79c4ed98a4e24a62ccf61c199ab0f680fa8f ↗
- https://git.kernel.org/stable/c/d0b7f11dd68b593bd970e5735be00e8d89bace30 ↗
- https://git.kernel.org/stable/c/3becc659f9cb76b481ad1fb71f54d5c8d6332d3f ↗
- https://git.kernel.org/stable/c/c9d2b9a80d06a58f37e0dc8c827075639b443927 ↗
- https://git.kernel.org/stable/c/fe1bebd0edb22e3536cbc920ec713331d1367ad4 ↗
- https://git.kernel.org/stable/c/08680c4dadc6e736c75bc2409d833f03f9003c51 ↗
- https://git.kernel.org/stable/c/72c7d62583ebce7baeb61acce6057c361f73be4a ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html ↗