Description
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on memory allocation failure. Without proper error checking, this may lead to a NULL pointer dereference when queue_work() is later called with the NULL workqueue pointer in epf_ntb_epc_init(). Add a NULL check immediately after alloc_workqueue() and return -ENOMEM on failure to prevent the driver from loading with an invalid workqueue pointer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to < 62b9e706d226329d1374c0c1b80222e75ae9d8cdaffected8b821cf761503b80d0bd052f932adfe1bc1a0088 to < 11e78304b0113d3a122dc2c37426adc34c809645affected8b821cf761503b80d0bd052f932adfe1bc1a0088 to < 829ccfb22950c430f2bf5b40465510c210afb4d5affected8b821cf761503b80d0bd052f932adfe1bc1a0088 to < 2f62f8be57882c26f8bede0cab293d013964208faffected8b821cf761503b80d0bd052f932adfe1bc1a0088 to < 314eab6740bcda504ef978be599f805de05ce6deaffected8b821cf761503b80d0bd052f932adfe1bc1a0088 to < 03f336a869b3a3f119d3ae52ac9723739c7fb7b6affected
Linux Linux
Default version status: affected
5.12affected0 to < 5.12unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected6.19.4 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/62b9e706d226329d1374c0c1b80222e75ae9d8cd ↗
- https://git.kernel.org/stable/c/11e78304b0113d3a122dc2c37426adc34c809645 ↗
- https://git.kernel.org/stable/c/829ccfb22950c430f2bf5b40465510c210afb4d5 ↗
- https://git.kernel.org/stable/c/2f62f8be57882c26f8bede0cab293d013964208f ↗
- https://git.kernel.org/stable/c/314eab6740bcda504ef978be599f805de05ce6de ↗
- https://git.kernel.org/stable/c/03f336a869b3a3f119d3ae52ac9723739c7fb7b6 ↗