3.8
Faible
CVE-2023-52584 In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif…
Description
In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif driver data that contains the clocks is allocated along with spmi_controller. On device remove, spmi_controller will be freed first, and then devres , including the clocks, will be cleanup. This leads to UAF because putting the clocks will access the clocks in the pmif driver data, which is already freed along with spmi_controller. This can be reproduced by enabling DEBUG_TEST_DRIVER_REMOVE and building the kernel with KASAN. Fix the UAF issue by using unmanaged clk_bulk_get() and putting the clocks before freeing spmi_controller.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.8 | premières → < 6.8 | 6.8 |
| Linux 6.7 | premières → < 6.7.4 | 6.7.4 |
| Linux 6.6 | premières → < 6.6.16 | 6.6.16 |
| Linux 6.1 | premières → < 6.1.77 | 6.1.77 |
| Linux | 5.17 | Pas de correctif indiqué |
| kernel 6.8 | premières → < 6.8 | 6.8 |
| kernel 6.7 | premières → < 6.7.4 | 6.7.4 |
| kernel 6.6 | premières → < 6.6.16 | 6.6.16 |
| kernel 6.1 | premières → < 6.1.77 | 6.1.77 |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kernel 1 | 1da177e4c3f4 → dernières | 521f28eedd6b |
Références
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux
Les 18283 CVE de Linux →
CVE-2026-99270
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix potential UAF in reqsk_timer_handler()
8.1
Élevée
CVE-2026-99269
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…
7.8
Élevée
CVE-2026-99261
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for…
Non notée
CVE-2026-99260
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags…
Non notée