Description
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This also puts work canceling for rumble and mode switch in steam_unregister, as that shouldn't persist while the client hdev is open.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9cd61c8179781344315c2a9816977ea415c5459e to < d2587923d50c8b141ce0ccb284c714cf6054d6a7affected9cd61c8179781344315c2a9816977ea415c5459e to < 81a8209c09f9be7eef860ca6cc154749a6b4d243affected9cd61c8179781344315c2a9816977ea415c5459e to < 86724f4bcf6049c3a322f7a7b1f968210059c46aaffected9cd61c8179781344315c2a9816977ea415c5459e to < b5ea938ff776306798d3a11485c2475034f92131affected9cd61c8179781344315c2a9816977ea415c5459e to < ddce9641ce924ed91ec8304577e463823a29ffafaffected
Linux Linux
Default version status: affected
6.3affected0 to < 6.3unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.11 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d2587923d50c8b141ce0ccb284c714cf6054d6a7 ↗
- https://git.kernel.org/stable/c/81a8209c09f9be7eef860ca6cc154749a6b4d243 ↗
- https://git.kernel.org/stable/c/86724f4bcf6049c3a322f7a7b1f968210059c46a ↗
- https://git.kernel.org/stable/c/b5ea938ff776306798d3a11485c2475034f92131 ↗
- https://git.kernel.org/stable/c/ddce9641ce924ed91ec8304577e463823a29ffaf ↗