Description
In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4i_crtc_init() returns plain NULL when layer initialization fails, while all its other error paths return an error pointer. The only caller, sun4i_tcon_bind(), checks the result with IS_ERR() and happily continues with tcon->crtc set to NULL. sun4i_rgb_init() and sun4i_lvds_init() then dereference it in drm_crtc_mask(), which oopses. Return the error pointer instead.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
dcd215801b0279f0a021516526cf7c0b67d5302e to < aaf812960fb5ade24be7a1d8fea27a1ffc458c30affecteddcd215801b0279f0a021516526cf7c0b67d5302e to < e216d6168f25a69e5ae5b981ee73b3a860a46441affecteddcd215801b0279f0a021516526cf7c0b67d5302e to < 2bb3169788f8296c8fc1e0d4fa6f1c6367cd5829affecteddcd215801b0279f0a021516526cf7c0b67d5302e to < 1882112124a642de7571fbf354fa1929decbb3efaffecteddcd215801b0279f0a021516526cf7c0b67d5302e to < 8f32af44d43332c02198752e596df00659bf4354affecteddcd215801b0279f0a021516526cf7c0b67d5302e to < 65bc02fec98e4e1d7d59d86cf2ddf8fd73dacb89affecteddcd215801b0279f0a021516526cf7c0b67d5302e to < c0d3219ffd4c0d42295e0dc949856067b7818b71affecteddcd215801b0279f0a021516526cf7c0b67d5302e to < 7061ff05ed4a3cf16e83f7e3ad09cbd212508a32affected
Linux Linux
Default version status: affected
4.12affected0 to < 4.12unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/aaf812960fb5ade24be7a1d8fea27a1ffc458c30 ↗
- https://git.kernel.org/stable/c/e216d6168f25a69e5ae5b981ee73b3a860a46441 ↗
- https://git.kernel.org/stable/c/2bb3169788f8296c8fc1e0d4fa6f1c6367cd5829 ↗
- https://git.kernel.org/stable/c/1882112124a642de7571fbf354fa1929decbb3ef ↗
- https://git.kernel.org/stable/c/8f32af44d43332c02198752e596df00659bf4354 ↗
- https://git.kernel.org/stable/c/65bc02fec98e4e1d7d59d86cf2ddf8fd73dacb89 ↗
- https://git.kernel.org/stable/c/c0d3219ffd4c0d42295e0dc949856067b7818b71 ↗
- https://git.kernel.org/stable/c/7061ff05ed4a3cf16e83f7e3ad09cbd212508a32 ↗