Description
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skb_clone in control TX t7xx_port_ctrl_tx() clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned->len, so an skb_clone() failure results in a NULL pointer dereference. Check the clone before using it. If previous fragments were already queued, preserve the driver's existing partial-write behavior by returning the number of bytes submitted so far.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
36bd28c1cb0dbf48645cfe43159907fb3253b33a to < 7edd4db82f9429591de10be4c904c817f12ba029affected36bd28c1cb0dbf48645cfe43159907fb3253b33a to < 112490467586146d323cb7230b1d72137e36900caffected36bd28c1cb0dbf48645cfe43159907fb3253b33a to < f7aebaee2961bfcb86f282202d3dbd9b69db1a7caffected36bd28c1cb0dbf48645cfe43159907fb3253b33a to < 4c1b25d85f4c9a0f85f3f8c39988ad266a3f3095affected36bd28c1cb0dbf48645cfe43159907fb3253b33a to < 05f789fa90d95d5771230e78453cedff2486039daffected
Linux Linux
Default version status: affected
6.4affected0 to < 6.4unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7edd4db82f9429591de10be4c904c817f12ba029 ↗
- https://git.kernel.org/stable/c/112490467586146d323cb7230b1d72137e36900c ↗
- https://git.kernel.org/stable/c/f7aebaee2961bfcb86f282202d3dbd9b69db1a7c ↗
- https://git.kernel.org/stable/c/4c1b25d85f4c9a0f85f3f8c39988ad266a3f3095 ↗
- https://git.kernel.org/stable/c/05f789fa90d95d5771230e78453cedff2486039d ↗