Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring_buffer_subbuf_order_set() frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free (rb_advance_iter()). Return -EBUSY on resize_disabled, matching ring_buffer_resize() behaviour.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f9b94daa542a8d2532f0930f01cd9aec2d19621b before b45b91db41379ee5fb36c187d6d7c37b725cbe8e; affected f9b94daa542a8d2532f0930f01cd9aec2d19621b before 62978cf6347972c04130e4e841ba404504d92b32; affected f9b94daa542a8d2532f0930f01cd9aec2d19621b before 7568e9e717e7540bd05bcc007f5d76fcaff3cdff; affected f9b94daa542a8d2532f0930f01cd9aec2d19621b before bf98d7b0d5a99991e47e66cee4eb1d3fa514be97 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 6.12.104 through 6.12.*; unaffected 6.18.45 through 6.18.*; unaffected 7.1.9 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.