In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: spi: corregir la asignación de estadísticas Las estadísticas por CPU del controlador no se asignan hasta después de que el controlador ha sido registrado con el núcleo del controlador, lo que deja una ventana donde acceder a los atributos de sysfs puede desencadenar una desreferencia de puntero NULL. Esto se soluciona moviendo la asignación de estadísticas a la asignación del controlador, mientras se vincula su vida útil a la del controlador (en lugar de usar devres implícito).
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-476
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23af077e80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23af074a00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24247a2280> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2460347740> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23af077700> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23af075600> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d24247a3880> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d24247a2c40> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d242438ad80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |