Description
In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup ice_dealloc_dynamic_port() uses dyn_port->vsi->idx to erase the dynamic port from pf->dyn_ports. However, it frees the VSI before reading the index for the erase, resulting in a use-after-free. Follow the reverse of the allocation order in ice_alloc_dynamic_port() by erasing the xarray entry before freeing the VSI.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
eda69d654c7edae21312f731e0308941cb2ee2a9 to < 7c1344df1ae0579f57b97647e5203b06496ce10caffectededa69d654c7edae21312f731e0308941cb2ee2a9 to < ca8a6285b11d01e5a279b1aa7fb55b1a02ecebb1affectededa69d654c7edae21312f731e0308941cb2ee2a9 to < b98eb58ba2f8fe8e9bba1b8a3b94fa5602c6de84affectededa69d654c7edae21312f731e0308941cb2ee2a9 to < 1402fc67d2f4e2e1fc7bf8ee0825b8ad994557ffaffected
Linux Linux
Default version status: affected
6.12affected0 to < 6.12unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.11 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected