ACK: [SRU][Jammy-OEM-5.17/6.0][PATCH 0/1] CVE-2023-3141

Cengiz Can cengiz.can at canonical.com
Tue Aug 8 16:07:08 UTC 2023


On 08/08/2023 16:35, Yuxuan Luo wrote:
> [Impact]
> It is found that memstick/r592 driver is likely to be vulnerable to a
> use-after-free flaw at driver removal, leading to potential kernel integrity
> damage.
>
> [Backport]
> Clean cherry pick.
>
> [Test]
> Compile and smoke tested via modprobe and rmmod r592.
>
> [Potential Regression]
> Expect minimal regression.
>
> Zheng Wang (1):
>    memstick: r592: Fix UAF bug in r592_remove due to race condition
Acked-by: Cengiz Can <cengiz.can at canonical.com>
>
>   drivers/memstick/host/r592.c | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>



More information about the kernel-team mailing list