[SRU][J/F/B][PATCH 0/1] CVE-2022-3565

Yuxuan Luo yuxuan.luo at canonical.com
Wed Nov 16 20:59:37 UTC 2022


[Impact]
A vulnerability is found at l1oip: when a timer handler is still running after
the card is released, a use-after-free occurs.

[Backport]
It is a clean cherry pick.

[Test]
Compile tested.

[Potential Regression]
No potential regression since it only adds a few conditional statement as
protection.

Duoming Zhou (1):
  mISDN: fix use-after-free bugs in l1oip timer handlers

 drivers/isdn/mISDN/l1oip.h      |  1 +
 drivers/isdn/mISDN/l1oip_core.c | 13 +++++++------
 2 files changed, 8 insertions(+), 6 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list