Description
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001_request_msix() unwinds previously registered handlers with free_irq() when request_irq() fails. The rollback loop uses the failing index i for every iteration instead of the already registered vector index j. That passes the wrong IRQ/dev_id pair to free_irq() and leaves the earlier handlers installed. Use j for both pci_irq_vector() and the matching irq_vector entry in the rollback loop.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a76037ff3479ad333a2505061915f7a21e7f3fb6 to < f39e3ca1f688d7c08954a0794e9bf1e279c83b15affecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < a980dec7c69990e4f119bcf6a2ea093d1c4975e8affecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < 0205db768570f9a46b20912afa581a0c7a63d8b7affecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < 2853ce9c88e0e6dd575f95f28b3a8c2b27164115affecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < fb22a8d2f3ac6665cc8bee197096b6675cac1a9faffecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < dd817463c9b42a3a9e23d15b86c6c77a6cfb809daffecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < e20b16aa3b49f9db5510940740255a987e6f2a6faffecteda76037ff3479ad333a2505061915f7a21e7f3fb6 to < 3f92a64545165bdbb36dee8fa35626b295463313affected
Linux Linux
Default version status: affected
4.11affected0 to < 4.11unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.51 to ≤ 6.18.*unaffected7.2.5 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f39e3ca1f688d7c08954a0794e9bf1e279c83b15 ↗
- https://git.kernel.org/stable/c/a980dec7c69990e4f119bcf6a2ea093d1c4975e8 ↗
- https://git.kernel.org/stable/c/0205db768570f9a46b20912afa581a0c7a63d8b7 ↗
- https://git.kernel.org/stable/c/2853ce9c88e0e6dd575f95f28b3a8c2b27164115 ↗
- https://git.kernel.org/stable/c/fb22a8d2f3ac6665cc8bee197096b6675cac1a9f ↗
- https://git.kernel.org/stable/c/dd817463c9b42a3a9e23d15b86c6c77a6cfb809d ↗
- https://git.kernel.org/stable/c/e20b16aa3b49f9db5510940740255a987e6f2a6f ↗
- https://git.kernel.org/stable/c/3f92a64545165bdbb36dee8fa35626b295463313 ↗