Description
In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f34d7a5b7010b82fe97da95496b9971435530062 to < 6c9c9367351a461d62e5c0a39bffdcfbb40f068baffectedf34d7a5b7010b82fe97da95496b9971435530062 to < 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783affectedf34d7a5b7010b82fe97da95496b9971435530062 to < 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35affectedf34d7a5b7010b82fe97da95496b9971435530062 to < c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6affectedf34d7a5b7010b82fe97da95496b9971435530062 to < 845a2737e0f5ffe5ca8d38de556012b0c9472cddaffected
Linux Linux
Default version status: affected
2.6.26affected0 to < 2.6.26unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.56 to ≤ 6.18.*unaffected7.2.10 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6c9c9367351a461d62e5c0a39bffdcfbb40f068b ↗
- https://git.kernel.org/stable/c/3bc82999fb85cecc7eb6ec1755ee7d698aa1e783 ↗
- https://git.kernel.org/stable/c/94af6cd832e9b4ce39a8fb59144a8f09ab56fd35 ↗
- https://git.kernel.org/stable/c/c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6 ↗
- https://git.kernel.org/stable/c/845a2737e0f5ffe5ca8d38de556012b0c9472cdd ↗