In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in the unlikely event that per-cpu statistics allocation fails during controller registration to avoid use-after-free (of driver resources) and unclocked register accesses.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: spi: corrección de uso después de liberación en caso de fallo de registro del controlador Asegúrese de anular el registro del núcleo del controlador también en el improbable caso de que falle la asignación de estadísticas por CPU durante el registro del controlador para evitar el uso después de liberación (de recursos del controlador) y los accesos a registros sin reloj.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Type: Secondary
Exploitability Score: 1.8
Impact Score: 5.9
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-416
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2357ccf7c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2357b4d140> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2357b4f840> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d2357cccd80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d242456cb80> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d242456e3c0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2357b4cd40> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2357b4f280> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2357b4d0c0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |