[SRU][M][PATCH 0/1] CVE-2024-26734

[Bethany Jamison]

[Impact]

 In the Linux kernel, the following vulnerability has been resolved:

 devlink: fix possible use-after-free and memory leaks in devlink_init()

 The pernet operations structure for the subsystem must be registered
 before registering the generic netlink family.

 Make an unregister in case of unsuccessful registration.

[Fix]

Mantic:	Clean cherry-pick from linux-6.6.y
Jammy:	not-affected
Focal:	not-affected
Bionic:	not-affected
Xenial:	not-affected
Trusty: not-affected

[Test Case]

Compile and boot tested.

[Where problems could occur]

This fix affects those who use the devlink api when registering or 
unregistering a generic netlink family, an issue with this fix 
would be visable to the user with memory corruption or a system 
crash.

Vasiliy Kovalev (1):
  devlink: fix possible use-after-free and memory leaks in
    devlink_init()

 net/devlink/core.c | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

-- 
2.34.1