Description
In the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the device DRIVER_OK with virtio_device_ready() before calling input_register_device(). If registration fails, the error path cleared vi->ready and called del_vqs() while the device was still live, so the device could keep DMA to queues that were already torn down. Match remove/freeze: call virtio_reset_device() on that path before tearing down the virtqueues.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
271c865161c57cfabca45b93eaa712b19da365bc to < 087b9ee4d36968329c846e6846e4e50f66532888affected271c865161c57cfabca45b93eaa712b19da365bc to < 16c90260ae7ae32d7ac9128fb5da404c37154765affected271c865161c57cfabca45b93eaa712b19da365bc to < 9a7e107734137f098f9b81e5615aa5a02c5395c7affected271c865161c57cfabca45b93eaa712b19da365bc to < 8407da8974326c1ffdfe6a5a9bfc8fed3212bbdfaffected271c865161c57cfabca45b93eaa712b19da365bc to < 668ebfea7ba623450b12fdeaa0d080464d0c0a14affected271c865161c57cfabca45b93eaa712b19da365bc to < 81489b32a21c9360f8750d1fb600155d27452e19affected
Linux Linux
Default version status: affected
4.1affected0 to < 4.1unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/087b9ee4d36968329c846e6846e4e50f66532888 ↗
- https://git.kernel.org/stable/c/16c90260ae7ae32d7ac9128fb5da404c37154765 ↗
- https://git.kernel.org/stable/c/9a7e107734137f098f9b81e5615aa5a02c5395c7 ↗
- https://git.kernel.org/stable/c/8407da8974326c1ffdfe6a5a9bfc8fed3212bbdf ↗
- https://git.kernel.org/stable/c/668ebfea7ba623450b12fdeaa0d080464d0c0a14 ↗
- https://git.kernel.org/stable/c/81489b32a21c9360f8750d1fb600155d27452e19 ↗