Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d before dbba371b19129abe9649553ab912e6bccf6c1a5b; affected 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d before 4911b836f35c034c36f102db4ecbe339b38e7d1d; affected 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d before 8139ce66b52a4a5638bfb445b037c07d4abeb08e; affected 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d before 60bfb563a399c4597dc80588a1109758a8908b97; affected 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d before 6c8dfb0362732bf1e4829867a2a5239fedc592d0 |
| Linux / Linux | affected 5.10; unaffected 0 before 5.10; unaffected 6.6.160 through 6.6.*; unaffected 6.12.91 through 6.12.*; unaffected 6.18.33 through 6.18.*; unaffected 7.0.10 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/dbba371b19129abe9649553ab912e6bccf6c1a5b
- https://git.kernel.org/stable/c/4911b836f35c034c36f102db4ecbe339b38e7d1d
- https://git.kernel.org/stable/c/8139ce66b52a4a5638bfb445b037c07d4abeb08e
- https://git.kernel.org/stable/c/60bfb563a399c4597dc80588a1109758a8908b97
- https://git.kernel.org/stable/c/6c8dfb0362732bf1e4829867a2a5239fedc592d0