Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers The irq handlers take a struct device pointer and call dev_get_drvdata() to obtain the driver data. However, the driver data is only set at the end of probe, after devm_request_irq(), so an interrupt taken in between causes the handlers to pass a NULL pointer to readl() and crash. Pass the private data directly as the devm_request_irq() argument instead of the device pointer, matching what the handlers expect.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < 7d857aec162fb02d10ce326aecc1ac7509c31f43affected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < a85315f2eb06adc5597a7103e1910fc7d0d35ffdaffected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < 721cfeb0b9572084435695ae535411b921d1ea68affected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < b4ef887bee4d3c177adac5d1eab8b2de31b08ac3affected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < 0d58a70b6dc7b65772e3ef7c43beb91882cf9ed5affected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < f51a540b14eecb8667bbe450192318271b87631eaffected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < 09e4c486348e176c083f8bee9169ae8f408cf8d1affected6f6c3c36f0917be24587eeba818ab4fdfcb5465a to < f12afefb7b01f94d6d66d397f323a9914edbf70eaffected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected5.10.266 to ≤ 5.10.*unaffected5.15.217 to ≤ 5.15.*unaffected6.1.184 to ≤ 6.1.*unaffected6.6.153 to ≤ 6.6.*unaffected6.12.105 to ≤ 6.12.*unaffected6.18.46 to ≤ 6.18.*unaffected7.1.10 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7d857aec162fb02d10ce326aecc1ac7509c31f43 ↗
- https://git.kernel.org/stable/c/a85315f2eb06adc5597a7103e1910fc7d0d35ffd ↗
- https://git.kernel.org/stable/c/721cfeb0b9572084435695ae535411b921d1ea68 ↗
- https://git.kernel.org/stable/c/b4ef887bee4d3c177adac5d1eab8b2de31b08ac3 ↗
- https://git.kernel.org/stable/c/0d58a70b6dc7b65772e3ef7c43beb91882cf9ed5 ↗
- https://git.kernel.org/stable/c/f51a540b14eecb8667bbe450192318271b87631e ↗
- https://git.kernel.org/stable/c/09e4c486348e176c083f8bee9169ae8f408cf8d1 ↗
- https://git.kernel.org/stable/c/f12afefb7b01f94d6d66d397f323a9914edbf70e ↗