Description
In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registration can fail before a cdev is allocated. Serial core keeps the port so setserial can still use it, and later removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer dereference. Only delete the cdev when the slot is not NULL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to < ea3d2fae7c1d6492145976553817d22e8ef69a0eaffecteda3a10ce3429e5dee623ad5c8407ea58e204fcb0a to < 21031bd0d662549412378110c989b164feb6e4beaffecteda3a10ce3429e5dee623ad5c8407ea58e204fcb0a to < 2af4c46b429907edc8cb069c78fca1d950120b98affecteda3a10ce3429e5dee623ad5c8407ea58e204fcb0a to < 3dbf85ef40b6366ba15e882f7536cdc98bea579aaffecteda3a10ce3429e5dee623ad5c8407ea58e204fcb0a to < c3b5623fd97648f2747444aa8932ae604662df93affected
Linux Linux
Default version status: affected
4.3affected0 to < 4.3unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/ea3d2fae7c1d6492145976553817d22e8ef69a0e ↗
- https://git.kernel.org/stable/c/21031bd0d662549412378110c989b164feb6e4be ↗
- https://git.kernel.org/stable/c/2af4c46b429907edc8cb069c78fca1d950120b98 ↗
- https://git.kernel.org/stable/c/3dbf85ef40b6366ba15e882f7536cdc98bea579a ↗
- https://git.kernel.org/stable/c/c3b5623fd97648f2747444aa8932ae604662df93 ↗