APPLIED: [SRU][F/J/K/L][PATCH 0/1] CVE-2023-3141

Luke Nowakowski-Krijger luke.nowakowskikrijger at canonical.com
Thu Jul 6 19:52:28 UTC 2023


Applied to focal, jammy, lunar linux master-next,

Also applied to jammy:linux-hwe-5.19 master-next as kinetic has gone EOL.

Thanks,
- Luke

On Mon, Jun 26, 2023 at 9:13 AM Yuxuan Luo <yuxuan.luo at canonical.com> wrote:

> [Impact]
> It is found that memstick/r592 driver is likely to be vulnerable to a
> use-after-free flaw at driver removal, leading to potential kernel
> integrity
> damage.
>
> [Backport]
> Clean cherry pick.
>
> [Test]
> Compile and smoke tested.
>
> [Potential Regression]
> Expect minimal regression.
>
> Zheng Wang (1):
>   memstick: r592: Fix UAF bug in r592_remove due to race condition
>
>  drivers/memstick/host/r592.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> --
> 2.34.1
>
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20230706/4031b61c/attachment.html>


More information about the kernel-team mailing list