mbox series

[SRU,N,0/1] CVE-2024-35984

Message ID 20240625205718.26479-1-bethany.jamison@canonical.com
Headers show
Series CVE-2024-35984 | expand

Message

Bethany Jamison June 25, 2024, 8:57 p.m. UTC 
[Impact]

i2c: smbus: fix NULL function pointer dereference

Baruch reported an OOPS when using the designware controller as target
only. Target-only modes break the assumption of one transfer function
always being available. Fix this by always checking the pointer in
__i2c_transfer.

[Fix]

Noble:	Clean cherry-pick from linux-6.8.y
Jammy:	pending
Focal:	pending
Bionic:	fix sent to esm ML
Xenial:	fix sent to esm ML
Trusty:	not affected

[Test Case]

Compile and boot tested

[Where problems could occur]

This fix affects those who use I2C protocol, an issue with this 
fix would be visible to the user via unexpected system behavior
or a system crash.

Wolfram Sang (1):
  i2c: smbus: fix NULL function pointer dereference

 drivers/i2c/i2c-core-base.c | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

Comments

Thibault Ferrante June 26, 2024, 8:33 a.m. UTC | #1 
On 25-06-2024 22:57, Bethany Jamison wrote:
> [Impact]
> 
> i2c: smbus: fix NULL function pointer dereference
> 
> Baruch reported an OOPS when using the designware controller as target
> only. Target-only modes break the assumption of one transfer function
> always being available. Fix this by always checking the pointer in
> __i2c_transfer.
> 
> [Fix]
> 
> Noble:	Clean cherry-pick from linux-6.8.y
> Jammy:	pending
> Focal:	pending
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	not affected
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects those who use I2C protocol, an issue with this
> fix would be visible to the user via unexpected system behavior
> or a system crash.
> 
> Wolfram Sang (1):
>    i2c: smbus: fix NULL function pointer dereference
> 
>   drivers/i2c/i2c-core-base.c | 12 ++++++------
>   1 file changed, 6 insertions(+), 6 deletions(-)
> 

Acked-by: Thibault Ferrante <thibault.ferrante@canonical.com>

--
Thibault
Manuel Diewald June 26, 2024, 2:26 p.m. UTC | #2 
On Tue, Jun 25, 2024 at 03:57:17PM -0500, Bethany Jamison wrote:
> [Impact]
> 
> i2c: smbus: fix NULL function pointer dereference
> 
> Baruch reported an OOPS when using the designware controller as target
> only. Target-only modes break the assumption of one transfer function
> always being available. Fix this by always checking the pointer in
> __i2c_transfer.
> 
> [Fix]
> 
> Noble:	Clean cherry-pick from linux-6.8.y
> Jammy:	pending
> Focal:	pending
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	not affected
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects those who use I2C protocol, an issue with this 
> fix would be visible to the user via unexpected system behavior
> or a system crash.
> 
> Wolfram Sang (1):
>   i2c: smbus: fix NULL function pointer dereference
> 
>  drivers/i2c/i2c-core-base.c | 12 ++++++------
>  1 file changed, 6 insertions(+), 6 deletions(-)
> 
> -- 
> 2.34.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Acked-by: Manuel Diewald <manuel.diewald@canonical.com>
Stefan Bader July 4, 2024, 5:26 p.m. UTC | #3 
On 25.06.24 22:57, Bethany Jamison wrote:
> [Impact]
> 
> i2c: smbus: fix NULL function pointer dereference
> 
> Baruch reported an OOPS when using the designware controller as target
> only. Target-only modes break the assumption of one transfer function
> always being available. Fix this by always checking the pointer in
> __i2c_transfer.
> 
> [Fix]
> 
> Noble:	Clean cherry-pick from linux-6.8.y
> Jammy:	pending
> Focal:	pending
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	not affected
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects those who use I2C protocol, an issue with this
> fix would be visible to the user via unexpected system behavior
> or a system crash.
> 
> Wolfram Sang (1):
>    i2c: smbus: fix NULL function pointer dereference
> 
>   drivers/i2c/i2c-core-base.c | 12 ++++++------
>   1 file changed, 6 insertions(+), 6 deletions(-)
> 

Rejected for the following reasons:
Already applied for Noble update: v6.8.9 upstream stable release. Commit 
updated with CVE number.

-Stefan