Description
In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure. If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success. Subsequent access to prz->buffer may dereference an invalid address and cause crashes. Add proper NULL checking for vmap() failures.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
831b624df1b420c8f9281ed1307a8db23afb72df to < d47234840aeb4182ed3ee795c578b1dfa9cbd25baffected831b624df1b420c8f9281ed1307a8db23afb72df to < 49918dd52615097529811d21ec6074dd02ebe77caffected831b624df1b420c8f9281ed1307a8db23afb72df to < 8baa234181f632cabacf73e4834a910859e9fcc9affected831b624df1b420c8f9281ed1307a8db23afb72df to < 1da904e84de608907662ad8a51ba9c571d61e003affected831b624df1b420c8f9281ed1307a8db23afb72df to < 8d849adfbc3e98417fb541620568db1a759ef441affected831b624df1b420c8f9281ed1307a8db23afb72df to < 2c99326dc1c79b7ce3c8dd92929b5ce724ff70ebaffected831b624df1b420c8f9281ed1307a8db23afb72df to < 88d5b28f63c7aac1271784e3b800ed405d1cde75affected831b624df1b420c8f9281ed1307a8db23afb72df to < 05363abc7625cf18c96e67f50673cd07f11da5e9affected9095f19baae92afb978f8df77d19280fe291b337affected36a9916189b46b78dbf4fa542739b464444f0537affected1cd01dba1355e291f636555b1920625ed58c1623affected7026e2457c5b0c0e8a81e65a8209b8420a437b4daffected1e5b387747ba285a64348b9a96b246d0b9d52b03affectedd0028f48b33086cf6d8f87831a650866107b5785affected3.16.62 to < 3.17affected3.18.123 to < 3.19affected4.4.158 to < 4.5affected4.9.129 to < 4.10affected4.14.72 to < 4.15affected4.18.10 to < 4.19affected
Linux Linux
Default version status: affected
4.19affected0 to < 4.19unaffected5.10.252 to ≤ 5.10.*unaffected5.15.202 to ≤ 5.15.*unaffected6.1.165 to ≤ 6.1.*unaffected6.6.128 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b ↗
- https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c ↗
- https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9 ↗
- https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 ↗
- https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441 ↗
- https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb ↗
- https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75 ↗
- https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9 ↗