Description
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devm_request_irq() The driver calls devm_request_irq() before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after devm_request_irq(), the handler may execute before init_completion(). This may result in calling complete() on an uninitialized completion, causing undefined behavior. This has been observed with KASAN. Fix this by initializing the completion before registering the IRQ.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < b9fcf0db433d79648ace74bc2b8b88f91e306304affected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < 82a5746c4c9e94f6f816ec7edea6ddc24417c6a5affected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < f4bb0a91f7badd6d15ac8d783a1169d9e1e95c17affected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < 49f6705d80b5e6175d8435d9c72b66bd516a8e89affected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < 8b5798ce0007874c14611b8ee4ce6c749855260eaffected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < d44b828eb551bd59ba9f22457825cc3db3a39fc1affected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < 077a7bc1c32d3da9670c5e282ea3e5ac8a94be59affected5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 to < f3ad1c87d8201e54b66bd6072442f0b5d5a308eeaffected
Linux Linux
Default version status: affected
4.19affected0 to < 4.19unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b9fcf0db433d79648ace74bc2b8b88f91e306304 ↗
- https://git.kernel.org/stable/c/82a5746c4c9e94f6f816ec7edea6ddc24417c6a5 ↗
- https://git.kernel.org/stable/c/f4bb0a91f7badd6d15ac8d783a1169d9e1e95c17 ↗
- https://git.kernel.org/stable/c/49f6705d80b5e6175d8435d9c72b66bd516a8e89 ↗
- https://git.kernel.org/stable/c/8b5798ce0007874c14611b8ee4ce6c749855260e ↗
- https://git.kernel.org/stable/c/d44b828eb551bd59ba9f22457825cc3db3a39fc1 ↗
- https://git.kernel.org/stable/c/077a7bc1c32d3da9670c5e282ea3e5ac8a94be59 ↗
- https://git.kernel.org/stable/c/f3ad1c87d8201e54b66bd6072442f0b5d5a308ee ↗