Description
In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d079f94c90469f413920b9f2b201537fac2ceb06 to < 222a9301b086852b90d3b092fef436c3f4e927c4affectedd079f94c90469f413920b9f2b201537fac2ceb06 to < 37ff63c5d7119cbc5c6bacdcc658add6008a8e1faffectedd079f94c90469f413920b9f2b201537fac2ceb06 to < 6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7affectedd079f94c90469f413920b9f2b201537fac2ceb06 to < 931abe1deb65b919d23fa203d7f6d6fbd4fccd8eaffectedd079f94c90469f413920b9f2b201537fac2ceb06 to < 4b7ee504969e074725e439c949f2483e5fa5572aaffectedd079f94c90469f413920b9f2b201537fac2ceb06 to < 084973ebd67b28f0945c5d45408f86c58b540110affected
Linux Linux
Default version status: affected
4.20affected0 to < 4.20unaffected6.1.183 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.6 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/222a9301b086852b90d3b092fef436c3f4e927c4 ↗
- https://git.kernel.org/stable/c/37ff63c5d7119cbc5c6bacdcc658add6008a8e1f ↗
- https://git.kernel.org/stable/c/6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7 ↗
- https://git.kernel.org/stable/c/931abe1deb65b919d23fa203d7f6d6fbd4fccd8e ↗
- https://git.kernel.org/stable/c/4b7ee504969e074725e439c949f2483e5fa5572a ↗
- https://git.kernel.org/stable/c/084973ebd67b28f0945c5d45408f86c58b540110 ↗