Description
In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < 1268ca9418e2217f2b60705cf4a280b689b26678affected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < a626dfca96041842053cf2d1efceb436c4cd8dcfaffected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < 5ef87b1b4656d675440ceab32a56e69ad958d3a1affected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < fa0dca89b4fb0909ffda7b9ab6051af33270f95eaffected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < dc711fb137b33c12e6ca22b6a9c9b9f21d49e4deaffected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < a837deeaa37cc3f0e8c4e5c096787047f272c956affected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < 56fd78c8c820f527f8003e379ab71004b2e79a44affected44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to < 7700a31039cdc6715cb6cce7e7a664ee4e945f67affected
Linux Linux
Default version status: affected
2.6.23affected0 to < 2.6.23unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.152 to ≤ 6.6.*unaffected6.12.104 to ≤ 6.12.*unaffected6.18.45 to ≤ 6.18.*unaffected7.1.9 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1268ca9418e2217f2b60705cf4a280b689b26678 ↗
- https://git.kernel.org/stable/c/a626dfca96041842053cf2d1efceb436c4cd8dcf ↗
- https://git.kernel.org/stable/c/5ef87b1b4656d675440ceab32a56e69ad958d3a1 ↗
- https://git.kernel.org/stable/c/fa0dca89b4fb0909ffda7b9ab6051af33270f95e ↗
- https://git.kernel.org/stable/c/dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de ↗
- https://git.kernel.org/stable/c/a837deeaa37cc3f0e8c4e5c096787047f272c956 ↗
- https://git.kernel.org/stable/c/56fd78c8c820f527f8003e379ab71004b2e79a44 ↗
- https://git.kernel.org/stable/c/7700a31039cdc6715cb6cce7e7a664ee4e945f67 ↗