Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Roll back partial protocol table registration scmi_protocol_table_register() can leave earlier requests registered when a later entry in the same ID table fails. Each request retains a pointer to the driver's ID table, so a failed module load can leave a dangling pointer after the module storage is released. Unrequest only the successfully registered prefix, in reverse order, before returning the failure. Leave the failed entry and the remaining entries untouched because matching requests can be owned by another driver.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
41714150f3d148fbcd7a947869c85531b53c50d4 to < ee556d118b11c6f5b60a32c1e84f366b336ac7d7affected2858f6e5f06440d6b9e9c3f57bc68915344830a9 to < 3fa8cabd2d8ed80dd0b818ca7fd410b591392ff6affected2858f6e5f06440d6b9e9c3f57bc68915344830a9 to < 456856a34906475fcf4b23879237103770dc7ef2affected2858f6e5f06440d6b9e9c3f57bc68915344830a9 to < 826413b858ea2969e4c3e8197d0065efc47c6343affected2858f6e5f06440d6b9e9c3f57bc68915344830a9 to < 2224b622260ba590ab56ea1585d6bf7610be25b2affected1294e1d50d96a3990dd115fda90bb120ec53f329affected6.1.191 to < 6.2affected
Linux Linux
Default version status: affected
6.9affected0 to < 6.9unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/ee556d118b11c6f5b60a32c1e84f366b336ac7d7 ↗
- https://git.kernel.org/stable/c/3fa8cabd2d8ed80dd0b818ca7fd410b591392ff6 ↗
- https://git.kernel.org/stable/c/456856a34906475fcf4b23879237103770dc7ef2 ↗
- https://git.kernel.org/stable/c/826413b858ea2969e4c3e8197d0065efc47c6343 ↗
- https://git.kernel.org/stable/c/2224b622260ba590ab56ea1585d6bf7610be25b2 ↗