Description
In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
539fec78edb4e084e7c532affc56cc42d4ceea4b to < 4005cb89139f7c9af85046b241dcf3fa2e1b3559affected539fec78edb4e084e7c532affc56cc42d4ceea4b to < 4eab1a74a498f0bf19f102f9362e9deef9307aeaaffected539fec78edb4e084e7c532affc56cc42d4ceea4b to < 654ef9c33e138ede6734ac286282df9faf83cd11affected539fec78edb4e084e7c532affc56cc42d4ceea4b to < fb5cb4913ce333cc4647722e8c2b8378e12f2464affected539fec78edb4e084e7c532affc56cc42d4ceea4b to < 85bb534ff12aab6916058897b39c748940a7a4c6affected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.33 to ≤ 6.18.*unaffected7.0.10 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4005cb89139f7c9af85046b241dcf3fa2e1b3559 ↗
- https://git.kernel.org/stable/c/4eab1a74a498f0bf19f102f9362e9deef9307aea ↗
- https://git.kernel.org/stable/c/654ef9c33e138ede6734ac286282df9faf83cd11 ↗
- https://git.kernel.org/stable/c/fb5cb4913ce333cc4647722e8c2b8378e12f2464 ↗
- https://git.kernel.org/stable/c/85bb534ff12aab6916058897b39c748940a7a4c6 ↗