Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 541afa10c126b6c22c2a805a559c70cc41fd156e before 34bcf11cd2528ae00bb6d764d808083c66824277; affected 541afa10c126b6c22c2a805a559c70cc41fd156e before 0edcc4284392b28826b5d37532b366b291e6e0fa; affected 541afa10c126b6c22c2a805a559c70cc41fd156e before 00a59600ae72d24859d0ad1783a78bc921bc2599; affected 541afa10c126b6c22c2a805a559c70cc41fd156e before 3d35f069e1c119992000d51236dbe54da2d4e61e; affected 541afa10c126b6c22c2a805a559c70cc41fd156e before 3d65a2eb4449fc9658fb860dea893025d028d90e; affected 541afa10c126b6c22c2a805a559c70cc41fd156e before a9b968e42690d784c241a0761c10253271f7df5d; affected 541afa10c126b6c22c2a805a559c70cc41fd156e before 61cb282fe97b3b0ba32ca09417a693162bf4ae3f |
| Linux / Linux | affected 5.8; unaffected 0 before 5.8; unaffected 5.15.222 through 5.15.*; unaffected 6.1.189 through 6.1.*; unaffected 6.6.158 through 6.6.*; unaffected 6.12.112 through 6.12.*; unaffected 6.18.55 through 6.18.*; unaffected 7.2.9 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/34bcf11cd2528ae00bb6d764d808083c66824277
- https://git.kernel.org/stable/c/0edcc4284392b28826b5d37532b366b291e6e0fa
- https://git.kernel.org/stable/c/00a59600ae72d24859d0ad1783a78bc921bc2599
- https://git.kernel.org/stable/c/3d35f069e1c119992000d51236dbe54da2d4e61e
- https://git.kernel.org/stable/c/3d65a2eb4449fc9658fb860dea893025d028d90e
- https://git.kernel.org/stable/c/a9b968e42690d784c241a0761c10253271f7df5d
- https://git.kernel.org/stable/c/61cb282fe97b3b0ba32ca09417a693162bf4ae3f