Description
In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device's ACPI companion object should verify its presence. san_probe() dereferences the result of ACPI_COMPANION() when installing the GSBUS address space handler, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. The dereference was introduced when the probe function was switched from ACPI_HANDLE() to ACPI_COMPANION(). Check the ACPI companion against NULL and return -ENODEV when it is missing, like commit e4865a56d013 ("ACPI: driver: Check ACPI_COMPANION() against NULL during probe") does for the core ACPI platform drivers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to < 4faa43d4ef0b98beb6c2b77a279f4aa5d7fa2d13affecteda9e10e58730432e5de840eb3ddd55c75f29341b3 to < 3855be0100efb98c26228c610db70a673611f3bdaffecteda9e10e58730432e5de840eb3ddd55c75f29341b3 to < f276b62f2ce1cbff7fa50a8ee5afd8fef5a60897affecteda9e10e58730432e5de840eb3ddd55c75f29341b3 to < 9b6479da662c2ec4e931ed9f7228df46aa8c3766affecteda9e10e58730432e5de840eb3ddd55c75f29341b3 to < 7fea5a310e3b2db24f7aafe64897e4e659ffbb7daffecteda9e10e58730432e5de840eb3ddd55c75f29341b3 to < 428a82d987fcd8844e8868c85582eae75b4b5c51affecteda9e10e58730432e5de840eb3ddd55c75f29341b3 to < 2b3a5dabe89e330413af403246b648c1890f368faffected
Linux Linux
Default version status: affected
5.14affected0 to < 5.14unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4faa43d4ef0b98beb6c2b77a279f4aa5d7fa2d13 ↗
- https://git.kernel.org/stable/c/3855be0100efb98c26228c610db70a673611f3bd ↗
- https://git.kernel.org/stable/c/f276b62f2ce1cbff7fa50a8ee5afd8fef5a60897 ↗
- https://git.kernel.org/stable/c/9b6479da662c2ec4e931ed9f7228df46aa8c3766 ↗
- https://git.kernel.org/stable/c/7fea5a310e3b2db24f7aafe64897e4e659ffbb7d ↗
- https://git.kernel.org/stable/c/428a82d987fcd8844e8868c85582eae75b4b5c51 ↗
- https://git.kernel.org/stable/c/2b3a5dabe89e330413af403246b648c1890f368f ↗