Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes. It appears it had dev_put() calls without prior dev_hold(), leading to imbalance and UAF.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fcfccf56f4eba7d00aa2d33c7bb1b33083237742; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f2d1443b18806640abdb530e88009af7be2588e7; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ca3829c18c8d0ceb656605d3bff6bb3dfb078589; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e612c4b014f5808fbc6beae21f5ccaca5e76a2f8; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a5e3a144268899f1a8c445c8a3bfa15873ba85e8; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9b9aeb3ada44d8abea1e31e4446113f460848ae4; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d03b79f459c7935cff830d98373474f440bd03ae |
| Linux / Linux | affected 2.6.12; unaffected 0 before 2.6.12; unaffected 5.4.295 through 5.4.*; unaffected 5.10.239 through 5.10.*; unaffected 5.15.186 through 5.15.*; unaffected 6.1.142 through 6.1.*; unaffected 6.6.95 through 6.6.*; unaffected 6.12.35 through 6.12.*; unaffected 6.15.4 through 6.15.*; unaffected 6.16 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/fcfccf56f4eba7d00aa2d33c7bb1b33083237742
- https://git.kernel.org/stable/c/f2d1443b18806640abdb530e88009af7be2588e7
- https://git.kernel.org/stable/c/ca3829c18c8d0ceb656605d3bff6bb3dfb078589
- https://git.kernel.org/stable/c/e612c4b014f5808fbc6beae21f5ccaca5e76a2f8
- https://git.kernel.org/stable/c/a5e3a144268899f1a8c445c8a3bfa15873ba85e8
- https://git.kernel.org/stable/c/5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc
- https://git.kernel.org/stable/c/9b9aeb3ada44d8abea1e31e4446113f460848ae4
- https://git.kernel.org/stable/c/d03b79f459c7935cff830d98373474f440bd03ae
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.