Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() If devm_kcalloc() for rx_chn->flows fails in a channel request function, the error path calls k3_udma_glue_release_rx_chn(), which dereferences the NULL rx_chn->flows pointer in k3_udma_glue_release_rx_flow(). Skip the flow release loop in k3_udma_glue_release_rx_chn() when rx_chn->flows is not allocated. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d702419134133db1eab2067dc6ea5723467fd917 to < b51ed7885ab0e8ecad765adc13b465cb1498cdc9affectedd702419134133db1eab2067dc6ea5723467fd917 to < b2985956e06632939bee47cee13bccd78ad7c3a1affectedd702419134133db1eab2067dc6ea5723467fd917 to < 967612574c542dec71f820a6eb16dea80dd187a1affectedd702419134133db1eab2067dc6ea5723467fd917 to < 89f5414660724bb562db4ac74665da16d4a57d99affectedd702419134133db1eab2067dc6ea5723467fd917 to < 5a6cb4d387eebf7d32a6ed3fcd39f94bf38bd134affectedd702419134133db1eab2067dc6ea5723467fd917 to < b14e6c52872556de2d6c137531e0ce85085c10edaffectedd702419134133db1eab2067dc6ea5723467fd917 to < 5b2d92b7b177226e1dca2e80dc8369131276c2a4affectedd702419134133db1eab2067dc6ea5723467fd917 to < 0294b6dd515256c03ea2dbf508ddd3826d788579affected
Linux Linux
Default version status: affected
5.6affected0 to < 5.6unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b51ed7885ab0e8ecad765adc13b465cb1498cdc9 ↗
- https://git.kernel.org/stable/c/b2985956e06632939bee47cee13bccd78ad7c3a1 ↗
- https://git.kernel.org/stable/c/967612574c542dec71f820a6eb16dea80dd187a1 ↗
- https://git.kernel.org/stable/c/89f5414660724bb562db4ac74665da16d4a57d99 ↗
- https://git.kernel.org/stable/c/5a6cb4d387eebf7d32a6ed3fcd39f94bf38bd134 ↗
- https://git.kernel.org/stable/c/b14e6c52872556de2d6c137531e0ce85085c10ed ↗
- https://git.kernel.org/stable/c/5b2d92b7b177226e1dca2e80dc8369131276c2a4 ↗
- https://git.kernel.org/stable/c/0294b6dd515256c03ea2dbf508ddd3826d788579 ↗