Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after port allocation failure rvt_alloc_device() deallocates the IB device when its port array cannot be allocated but then returns the pointer to the released allocation. Callers treat any non-NULL value as valid and dereference it, resulting in a use-after-free. Return NULL immediately after deallocation so callers can propagate the allocation failure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to < 32d2cdb0f3cac430b04124c3b7248851fe2037f8affectedff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to < b7129930d1ec46c03a0de07fdce6c29f75795006affectedff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to < 5a1a7a5e2fe1a15824fa9ae5edd8f008259471d1affectedff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to < 80968b42d13080bf7bc1f3ee17fef126ce2ad98faffectedff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to < b1e1b25723af44328524c7b54433e4bf0ab9930caffectedff6acd69518e0a84bd9c9b7f1bd4313f7076db97 to < 2982eaf3b9d2d953318c74cd6f1b7576ea6d7b1faffected
Linux Linux
Default version status: affected
4.6affected0 to < 4.6unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/32d2cdb0f3cac430b04124c3b7248851fe2037f8 ↗
- https://git.kernel.org/stable/c/b7129930d1ec46c03a0de07fdce6c29f75795006 ↗
- https://git.kernel.org/stable/c/5a1a7a5e2fe1a15824fa9ae5edd8f008259471d1 ↗
- https://git.kernel.org/stable/c/80968b42d13080bf7bc1f3ee17fef126ce2ad98f ↗
- https://git.kernel.org/stable/c/b1e1b25723af44328524c7b54433e4bf0ab9930c ↗
- https://git.kernel.org/stable/c/2982eaf3b9d2d953318c74cd6f1b7576ea6d7b1f ↗