Description
In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation. Copy the basename instead.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9d976d6721dfb525b81ce981e1363c70c0975aab to < 1312ae33b91430ec99e69cd3d47f0e50a4ebf54baffected9d976d6721dfb525b81ce981e1363c70c0975aab to < a38caa9ed0d5c61c17d88393b14b292199289c1faffected9d976d6721dfb525b81ce981e1363c70c0975aab to < 09d002c8fb0261d35ce9d8a705de5db034ee90b8affected9d976d6721dfb525b81ce981e1363c70c0975aab to < b519dfce1998c323e54a56f911cf708d9ba0e076affected9d976d6721dfb525b81ce981e1363c70c0975aab to < 3394c7ba23336bdb7ece29127130fd01731d42d8affected9d976d6721dfb525b81ce981e1363c70c0975aab to < 2b0ac85512b7f67479127b2713254490662eb13daffected
Linux Linux
Default version status: affected
5.18affected0 to < 5.18unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.51 to ≤ 6.18.*unaffected7.2.5 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1312ae33b91430ec99e69cd3d47f0e50a4ebf54b ↗
- https://git.kernel.org/stable/c/a38caa9ed0d5c61c17d88393b14b292199289c1f ↗
- https://git.kernel.org/stable/c/09d002c8fb0261d35ce9d8a705de5db034ee90b8 ↗
- https://git.kernel.org/stable/c/b519dfce1998c323e54a56f911cf708d9ba0e076 ↗
- https://git.kernel.org/stable/c/3394c7ba23336bdb7ece29127130fd01731d42d8 ↗
- https://git.kernel.org/stable/c/2b0ac85512b7f67479127b2713254490662eb13d ↗