Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after calling ppl_io_unit_finished(), touching io->pending_flushes and leading to a use-after-free. Add a break statement to stop the loop once io is freed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before cf01f9413565e86673baf927291a088b6975692b; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before e7505842f1329ece90cb9ea0db87772aeca44052; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before b5123bf667ac29ddd8106f9ca7cc01316513ae66; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before e77c80670f2c2bf491da9b173931e1da4677c23a; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before 8914c3d40870f16429a326e97e4016bedc6ede4c; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before 455b56209f9615c3902dcc398dd867abb5ade3ab; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before fcf21df7d3c50c8ebeb0757df5d21b02dcae4218; affected 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before 371f7a1b392edc8b7cf449cc7713179b588f2d0e |
| Linux / Linux | affected 4.16; unaffected 0 before 4.16; unaffected 5.10.270 through 5.10.*; unaffected 5.15.221 through 5.15.*; unaffected 6.1.188 through 6.1.*; unaffected 6.6.157 through 6.6.*; unaffected 6.12.110 through 6.12.*; unaffected 6.18.52 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/cf01f9413565e86673baf927291a088b6975692b
- https://git.kernel.org/stable/c/e7505842f1329ece90cb9ea0db87772aeca44052
- https://git.kernel.org/stable/c/b5123bf667ac29ddd8106f9ca7cc01316513ae66
- https://git.kernel.org/stable/c/e77c80670f2c2bf491da9b173931e1da4677c23a
- https://git.kernel.org/stable/c/8914c3d40870f16429a326e97e4016bedc6ede4c
- https://git.kernel.org/stable/c/455b56209f9615c3902dcc398dd867abb5ade3ab
- https://git.kernel.org/stable/c/fcf21df7d3c50c8ebeb0757df5d21b02dcae4218
- https://git.kernel.org/stable/c/371f7a1b392edc8b7cf449cc7713179b588f2d0e