Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: kcm: fix strp_init() order and cleanup strp_init() is called just a few lines above this csk->sk_user_data check, it also initializes strp->work etc., therefore, it is unnecessary to call strp_done() to cancel the freshly initialized work. And if sk_user_data is already used by KCM, psock->strp should not be touched, particularly strp->work state, so we need to move strp_init() after the csk->sk_user_data check. This also makes a lockdep warning reported by syzbot go away.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 44890e9ff771ef11777b2d1ebf8589255eb12502 before 473f394953216614087f4179e55cdf0cf616a13b; affected e5571240236c5652f3e079b1d5866716a7ad819c before a8a0c321319ad64a5427d6172cd9c23b4d6ca1e8; affected e5571240236c5652f3e079b1d5866716a7ad819c before 0946ff31d1a8778787bf6708beb20f38715267cc; affected e5571240236c5652f3e079b1d5866716a7ad819c before 1b6666964ca1de93a7bf06e122bcf3616dbd33a9; affected e5571240236c5652f3e079b1d5866716a7ad819c before 55fb8c3baa8071c5d533a9ad48624e44e2a04ef5; affected e5571240236c5652f3e079b1d5866716a7ad819c before f865976baa85915c7672f351b74d5974b93215f6; affected e5571240236c5652f3e079b1d5866716a7ad819c before 8fc29ff3910f3af08a7c40a75d436b5720efe2bf; affected 085cbbda4b4cc7dd2ba63806346881c2c2e10107; affected 383250363daf01eb7aa3728c09ef8a4f6d8a3252; affected 19042316b9e12c93bf334a04d4dd7a4e846c7311; affected 4.14.22 before 4.14.293; affected 4.9.84 before 4.10; affected 4.9.100 before 4.10 |
| Linux / Linux | affected 4.15; unaffected 0 before 4.15; unaffected 4.14.293 through 4.14.*; unaffected 4.19.258 through 4.19.*; unaffected 5.4.213 through 5.4.*; unaffected 5.10.142 through 5.10.*; unaffected 5.15.66 through 5.15.*; unaffected 5.19.8 through 5.19.*; unaffected 6.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/473f394953216614087f4179e55cdf0cf616a13b
- https://git.kernel.org/stable/c/a8a0c321319ad64a5427d6172cd9c23b4d6ca1e8
- https://git.kernel.org/stable/c/0946ff31d1a8778787bf6708beb20f38715267cc
- https://git.kernel.org/stable/c/1b6666964ca1de93a7bf06e122bcf3616dbd33a9
- https://git.kernel.org/stable/c/55fb8c3baa8071c5d533a9ad48624e44e2a04ef5
- https://git.kernel.org/stable/c/f865976baa85915c7672f351b74d5974b93215f6
- https://git.kernel.org/stable/c/8fc29ff3910f3af08a7c40a75d436b5720efe2bf