Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw_edma_pcie_probe() treats the PCI device ID driver_data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can match the driver without that data, which leads to a NULL pointer dereference. Reject such matches before enabling the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to < 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64affected41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to < a1042599fa8f9e313be176eb1ea1ae199f983419affected41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to < 043acb00e4edd4b9ffb9dd0e357482dcd9086486affected41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to < 044f7b3252d4fb2143d4999eec2800c08f1001edaffected41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to < 11d7cfe0c119691b2dafbb699bbca90258c678aaaffected
Linux Linux
Default version status: affected
5.3affected0 to < 5.3unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/2733b5dcb5a4ba4446f7bac954b97e4501dcaa64 ↗
- https://git.kernel.org/stable/c/a1042599fa8f9e313be176eb1ea1ae199f983419 ↗
- https://git.kernel.org/stable/c/043acb00e4edd4b9ffb9dd0e357482dcd9086486 ↗
- https://git.kernel.org/stable/c/044f7b3252d4fb2143d4999eec2800c08f1001ed ↗
- https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa ↗