[SRU][B,F,J,K][PATCH 0/1] CVE-2023-1118
Magali Lemes
magali.lemes.do.sacramento at canonical.com
Fri Mar 17 16:55:46 UTC 2023
[Impact]
A flaw use after free in the Linux kernel integrated infrared
receiver/transceiver driver was found in the way user detaching rc device. A
local user could use this flaw to crash the system or potentially escalate
their privileges on the system.
[Backport]
Clean cherry-pick.
[Test]
Compiled, boot and module load tested.
[Regression potential]
Minimal, since we're only unregistering the RC device and adding
del_timer_sync() to deactivate the tx_sim_timer timer as first actions in the
ene_remove() function.
Duoming Zhou (1):
media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
drivers/media/rc/ene_ir.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
--
2.34.1
More information about the kernel-team
mailing list