[SRU][Jammy][Focal][PATCH 0/1] CVE-2023-4134

[Bethany Jamison]

[Impact]

It was discovered that a race condition existed in the Cypress touchscreen
driver in the Linux kernel during device removal, leading to a use-after-
free vulnerability. A physically proximate attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.

[Fix]

Clean cherry-pick.

[Test Case]

Compile and boot test.

[Where problems could occur]

Issues could happen when a Cypress touchscreen device or driver is removed.

Duoming Zhou (1):
  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()

 drivers/input/touchscreen/cyttsp4_core.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

-- 
2.34.1