APPLIED: [SRU][F][PATCH 0/1] CVE-2022-48863

[Stefan Bader]

On 12.08.24 23:19, Bethany Jamison wrote:
> [Impact]
> 
> mISDN: Fix memory leak in dsp_pipeline_build()
> 
> dsp_pipeline_build() allocates dup pointer by kstrdup(cfg),
> but then it updates dup variable by strsep(&dup, "|").
> As a result when it calls kfree(dup), the dup variable contains NULL.
> 
> Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
> 
> [Fix]
> 
> Noble:	not-affected
> Jammy:	not-affected
> Focal:	Backport - ignored context conflict from neighboring line, should
> 	not affect fix
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	won't fix
> 
> [Test Case]
> 
> Compiled
> 
> [Where problems could occur]
> 
> This fix affects those who use pipelined audio processing, an issue with
> this fix would be visible to the user via a decrease in system performance.
> 
> Alexey Khoroshilov (1):
>    mISDN: Fix memory leak in dsp_pipeline_build()
> 
>   drivers/isdn/mISDN/dsp_pipeline.c | 6 +++---
>   1 file changed, 3 insertions(+), 3 deletions(-)
> 

Applied to focal:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240816/5bba3702/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240816/5bba3702/attachment-0001.sig>