Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before c69d8aceda362c95bbc4e2182f5829275a7db0c8; affected ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 24319f25b641e55f84e55455092a39a2485c78d4; affected ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 1ed0ccd5649154bfc00ab11c59262d4f42515252; affected ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before bbd87eca5407288f2b63ff9357c611cd57e7e640; affected ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 21f027016b1290d13c30b198ae7a00e6b3d1d5a5 |
| Linux / Linux | affected 5.5; unaffected 0 before 5.5; unaffected 6.6.160 through 6.6.*; unaffected 6.12.113 through 6.12.*; unaffected 6.18.56 through 6.18.*; unaffected 7.2.10 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/c69d8aceda362c95bbc4e2182f5829275a7db0c8
- https://git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4
- https://git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252
- https://git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640
- https://git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5