Description
In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_power driver registers handlers for suspend and subsystem restart events using register_event(). However, the work structures (zynqmp_pm_init_suspend_work and zynqmp_pm_init_restart_work) used by these handlers were allocated and initialized after the registration call. This created a race window where, if the firmware triggered an event immediately after registration but before allocation, the callback (suspend_event_callback or subsystem_restart_event_callback) would dereference a NULL pointer in work_pending(), leading to a crash. Fix this by allocating and initializing the work structures before registering the events.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fcf544ac64397776a18246eba5a8ca72a47c4405 to < 07ea9081b8fefb99e2f427e0f0602a5e576cb120affectedfcf544ac64397776a18246eba5a8ca72a47c4405 to < e124f7b170337563d78a7a6aa152c897d229bc39affectedfcf544ac64397776a18246eba5a8ca72a47c4405 to < d349aa118ff5e4cab88424ce1b16e08edd70f8bbaffectedfcf544ac64397776a18246eba5a8ca72a47c4405 to < fb445935338405110baca8f541a2df3b4cb8d712affected
Linux Linux
Default version status: affected
6.11affected0 to < 6.11unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected