Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 5b48f5711f1c630841ab78dcc061de902f0e37bf before 19f553a1ddf260da6570ed8f8d91a8c87f49b63a; affected 85cd41070df992d3c0dfd828866fdd243d3b774a before 659701c0b954ccdb4a916a4ad59bbc16e726d42c; affected f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1 before 0622846db728a5332b917c797c733e202c4620ae; affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 before 6d7d458c41b98a5c1670cbd36f2923c37de51cf5; affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 before 1f912f8484e9c4396378c39460bbea0af681f319; affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 before 63567ecd99a24495208dc860d50fb17440043006; affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 before 7c9db92d5f0eadca30884af75c53d601edc512ee; affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 before dac5e6249159ac255dad9781793dbe5908ac9ddb; affected fbac09a3b8890003c0c55294c00709f3ae5501bb; affected edb4baffb9483141a50fb7f7146cfe4a4c0c2db8; affected 5.4.205 before 5.4.294; affected 5.10.130 before 5.10.238; affected 5.15.54 before 5.15.185; affected 4.19.252 before 4.20; affected 5.18.11 before 5.19 |
| Linux / Linux | affected 5.19; unaffected 0 before 5.19; unaffected 5.4.294 through 5.4.*; unaffected 5.10.238 through 5.10.*; unaffected 5.15.185 through 5.15.*; unaffected 6.1.141 through 6.1.*; unaffected 6.6.93 through 6.6.*; unaffected 6.12.31 through 6.12.*; unaffected 6.14.9 through 6.14.*; unaffected 6.15 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a
- https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c
- https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae
- https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5
- https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319
- https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006
- https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee
- https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb
ADP enrichment
No English description supplied.