APPLIED: [SRU Focal 0/1] CVE-2023-45863

Stefan Bader stefan.bader at canonical.com
Thu Dec 14 14:33:18 UTC 2023


On 13.12.23 15:19, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
>   With root access, an attacker can trigger a race condition that results in
>   a fill_kobj_path out-of-bounds write.
> 
> [Backport]
> Picked from 5.4.y backport.
> 
> [Potential regression]
> This could lead to infinite loops when devices or other kobjects are
> instantiated.
> 
> Wang Hai (1):
>    kobject: Fix slab-out-of-bounds in fill_kobj_path()
> 
>   lib/kobject.c | 12 ++++++++++--
>   1 file changed, 10 insertions(+), 2 deletions(-)
> 

Applied to focal:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 44613 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20231214/a541df0f/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20231214/a541df0f/attachment-0001.sig>


More information about the kernel-team mailing list