Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chips() allocates generic chip data that must be freed via irq_domain_remove_generic_chips(). The devres action mvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which only frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set. Call irq_domain_remove_generic_chips() explicitly before irq_domain_remove() instead.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 812d47889a8e418d7bea9bec383581a34c19183e before db2b40dc12cd6ae4704f52d62c0147ef31527f60; affected 812d47889a8e418d7bea9bec383581a34c19183e before 3649b04f86b95243fa0c845695051455fa2ba40b; affected 812d47889a8e418d7bea9bec383581a34c19183e before 3bfcce441c552133adeeb99c294d0ce8a62612ef; affected 812d47889a8e418d7bea9bec383581a34c19183e before d73e4d790db611da7439e78a6ab6cb32e7885ab8; affected 812d47889a8e418d7bea9bec383581a34c19183e before b11c513ad943f35cf5e8007d3a56279c79b7ed4b; affected f0cde54863da281cec1ed85497b4ec58d29c1460; affected 7a9239fd04802ee6ddf82d211cff3ee7df9c473a; affected 3.16.40 before 3.17; affected 4.8.9 before 4.9 |
| Linux / Linux | affected 4.9; unaffected 0 before 4.9; unaffected 6.6.160 through 6.6.*; unaffected 6.12.97 through 6.12.*; unaffected 6.18.40 through 6.18.*; unaffected 7.1.5 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/db2b40dc12cd6ae4704f52d62c0147ef31527f60
- https://git.kernel.org/stable/c/3649b04f86b95243fa0c845695051455fa2ba40b
- https://git.kernel.org/stable/c/3bfcce441c552133adeeb99c294d0ce8a62612ef
- https://git.kernel.org/stable/c/d73e4d790db611da7439e78a6ab6cb32e7885ab8
- https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b