Description
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free bugs in error paths Fix several instances of error paths in which we call __nvmem_device_put() - which may end up freeing the underlying memory and other resources - and then keep on using the nvmem structure. Always put the reference to the nvmem device as the last step before returning the error code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e888d445ac33a5b0288d670ecd970908b13f07cd to < 6cdcf0d16c80900f42d60252480cd131c1a83d23affectede888d445ac33a5b0288d670ecd970908b13f07cd to < e0d38bf47a72da2f02c9fa6f752cd66d977cd7f7affectede888d445ac33a5b0288d670ecd970908b13f07cd to < cb85ef5a227b3662b88f4d849a1aad43bfe7f5aeaffectede888d445ac33a5b0288d670ecd970908b13f07cd to < 40e2a459c0dd1333b2343831480a0ad80dc07614affectede888d445ac33a5b0288d670ecd970908b13f07cd to < 5b6b6fc491899d583eaa75344e094796ae9b530baffected
Linux Linux
Default version status: affected
4.20affected0 to < 4.20unaffected6.6.160 to ≤ 6.6.*unaffected6.12.94 to ≤ 6.12.*unaffected6.18.36 to ≤ 6.18.*unaffected7.0.13 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6cdcf0d16c80900f42d60252480cd131c1a83d23 ↗
- https://git.kernel.org/stable/c/e0d38bf47a72da2f02c9fa6f752cd66d977cd7f7 ↗
- https://git.kernel.org/stable/c/cb85ef5a227b3662b88f4d849a1aad43bfe7f5ae ↗
- https://git.kernel.org/stable/c/40e2a459c0dd1333b2343831480a0ad80dc07614 ↗
- https://git.kernel.org/stable/c/5b6b6fc491899d583eaa75344e094796ae9b530b ↗