Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op->addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store op->addr.val and op->cmd.opcode to fix this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e before 1231279389b5e638bc3b66b9741c94077aed4b5a; affected 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e before d67e0d6bd92ebbb0294e7062bbf5cdc773764e62; affected 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e before 23269ac9f123eca3aea7682d3345c02e71ed696c; affected 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e before a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58 |
| Linux / Linux | affected 5.10; unaffected 0 before 5.10; unaffected 5.10.37 through 5.10.*; unaffected 5.11.21 through 5.11.*; unaffected 5.12.4 through 5.12.*; unaffected 5.13 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/1231279389b5e638bc3b66b9741c94077aed4b5a
- https://git.kernel.org/stable/c/d67e0d6bd92ebbb0294e7062bbf5cdc773764e62
- https://git.kernel.org/stable/c/23269ac9f123eca3aea7682d3345c02e71ed696c
- https://git.kernel.org/stable/c/a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.