Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 9bf94f836e32ea168ec7448a523c11480317ad79 before 8a782244972715c76bdaf8b662e9b22e260c5296; affected 9bf94f836e32ea168ec7448a523c11480317ad79 before b7e507c6da8875da93b4130c8185e82a9dfd565c; affected 9bf94f836e32ea168ec7448a523c11480317ad79 before ce308ce18dedc18e9eeff8473892975e6fdd7aef; affected 9bf94f836e32ea168ec7448a523c11480317ad79 before 396b83106f5e7d16467049f0caabd10533c01a0e; affected 9bf94f836e32ea168ec7448a523c11480317ad79 before e1dea54496f90a62318cf4eeaa1e9ef8316e92b6 |
| Linux / Linux | affected 4.16; unaffected 0 before 4.16; unaffected 6.6.160 through 6.6.*; unaffected 6.12.113 through 6.12.*; unaffected 6.18.56 through 6.18.*; unaffected 7.2.10 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/8a782244972715c76bdaf8b662e9b22e260c5296
- https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c
- https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef
- https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e
- https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6