Description
In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in the unlikely event that per-cpu statistics allocation fails during controller registration to avoid use-after-free (of driver resources) and unclocked register accesses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6598b91b5ac32bc756d7c3000a31f775d4ead1c4 to < 0e23f50086da7d0b183dfeac26021acfcdee086baffected6598b91b5ac32bc756d7c3000a31f775d4ead1c4 to < 6bbd385b30c7fb6c7ee0669e9ada91490938c051affected6598b91b5ac32bc756d7c3000a31f775d4ead1c4 to < afe27c1f43aa57530011f419be6ddf71306565d2affected6598b91b5ac32bc756d7c3000a31f775d4ead1c4 to < 80f3e8cd2b4ad355b2ad2024cf423f6d183404f7affected6598b91b5ac32bc756d7c3000a31f775d4ead1c4 to < 23b51bad2eb8787aa74324cfccefb258515ae5baaffected6598b91b5ac32bc756d7c3000a31f775d4ead1c4 to < 8634e05b08ead636e926022f4a98416e13440df9affected
Linux Linux
Default version status: affected
6.0affected0 to < 6.0unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.78 to ≤ 6.12.*unaffected6.18.20 to ≤ 6.18.*unaffected6.19.10 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0e23f50086da7d0b183dfeac26021acfcdee086b ↗
- https://git.kernel.org/stable/c/6bbd385b30c7fb6c7ee0669e9ada91490938c051 ↗
- https://git.kernel.org/stable/c/afe27c1f43aa57530011f419be6ddf71306565d2 ↗
- https://git.kernel.org/stable/c/80f3e8cd2b4ad355b2ad2024cf423f6d183404f7 ↗
- https://git.kernel.org/stable/c/23b51bad2eb8787aa74324cfccefb258515ae5ba ↗
- https://git.kernel.org/stable/c/8634e05b08ead636e926022f4a98416e13440df9 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗