Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump_to_endpoint() caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the endpoint has been already released. Add private_free to clear the associated data for avoiding the further dereference for delayed releases.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
49eccef6d6e1c00dac6fb2e7eb6f9206c33e1c37 to < d431941825d357be7d9ab0cb7505e3a1963bd89eaffected8a7a33b846d6ba695891b8d0040027cdbad8cd52 to < 422d8a02de5ce6a29d616d55e5ead5dec69ac1d7affectedcc014ebf803174f0e5d15956dfc5a38413c945ae to < d217d723c5e43881b952cdb978477f7f2dc0b6d7affectedae388c0e1bf727972096f770f82d12e4f748d1b6 to < f9d492a39ebeb1a56f13ec6dd165a18a48dec812affected4a05b2d1b4642df74f30b6f54843e825c4a2bfd3 to < f8a80cfb68613fb7e6452b66447dbc63f435d140affected
Linux Linux
Default version status: unaffected
6.6.151 to < 6.6.152affected6.12.103 to < 6.12.104affected6.18.44 to < 6.18.45affected7.1.8 to < 7.1.9affected
References
- https://git.kernel.org/stable/c/d431941825d357be7d9ab0cb7505e3a1963bd89e ↗
- https://git.kernel.org/stable/c/422d8a02de5ce6a29d616d55e5ead5dec69ac1d7 ↗
- https://git.kernel.org/stable/c/d217d723c5e43881b952cdb978477f7f2dc0b6d7 ↗
- https://git.kernel.org/stable/c/f9d492a39ebeb1a56f13ec6dd165a18a48dec812 ↗
- https://git.kernel.org/stable/c/f8a80cfb68613fb7e6452b66447dbc63f435d140 ↗