mbox series

[SRU,OEM-5.17,v2,0/1] CVE-2022-3635

Message ID 20230606085811.178001-1-thibault.ferrante@canonical.com
Headers show
Series CVE-2022-3635 | expand

Message

Thibault Ferrante June 6, 2023, 8:58 a.m. UTC 
[Impact]
When ATM IDT 77252 driver is removed, current timer isn't
stopped and lead to use after free when the timer expires.

[Fix]
Cherry picked from upstream.

[Test case]
Compile, boot tested.

[Potential regression]
Only users of ATM IDT 77252 driver can be affected
by this change when the driver stops.
This patch is already integrated in other kernels.

Duoming Zhou (1):
  atm: idt77252: fix use-after-free bugs caused by tst_timer

 drivers/atm/idt77252.c | 1 +
 1 file changed, 1 insertion(+)

Comments

Thadeu Lima de Souza Cascardo June 6, 2023, 10:41 a.m. UTC | #1 
Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Andrei Gherzan June 6, 2023, 12:28 p.m. UTC | #2 
On 23/06/06 10:58AM, Thibault Ferrante wrote:
> [Impact]
> When ATM IDT 77252 driver is removed, current timer isn't
> stopped and lead to use after free when the timer expires.
> 
> [Fix]
> Cherry picked from upstream.
> 
> [Test case]
> Compile, boot tested.
> 
> [Potential regression]
> Only users of ATM IDT 77252 driver can be affected
> by this change when the driver stops.
> This patch is already integrated in other kernels.
> 
> Duoming Zhou (1):
>   atm: idt77252: fix use-after-free bugs caused by tst_timer
> 
>  drivers/atm/idt77252.c | 1 +
>  1 file changed, 1 insertion(+)
> 
> -- 
> 2.39.2

Acked-by: Andrei Gherzan <andrei.gherzan@canonical.com>
Timo Aaltonen July 4, 2023, 11:26 a.m. UTC | #3 
Thibault Ferrante kirjoitti 6.6.2023 klo 11.58:
> [Impact]
> When ATM IDT 77252 driver is removed, current timer isn't
> stopped and lead to use after free when the timer expires.
> 
> [Fix]
> Cherry picked from upstream.
> 
> [Test case]
> Compile, boot tested.
> 
> [Potential regression]
> Only users of ATM IDT 77252 driver can be affected
> by this change when the driver stops.
> This patch is already integrated in other kernels.
> 
> Duoming Zhou (1):
>    atm: idt77252: fix use-after-free bugs caused by tst_timer
> 
>   drivers/atm/idt77252.c | 1 +
>   1 file changed, 1 insertion(+)
> 

applied to oem-5.17, thanks