APPLIED: [SRU][Jammy][Focal][PATCH v2 0/1] CVE-2023-22995

[Roxana Nicolescu]

On 09/01/2024 14:02, Bethany Jamison wrote:
> [Impact]
>
> In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in
> drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls.
>
> [Fix]
>
> Jammy: Clean cherry-pick.
> Focal: I had a missing context merge conflict - I removed the conflicting line
> from the incoming change because it wasn't apart of this cve fix and wasn't
> applicable to Focal.
>
> [Test Case]
>
> Compile and boot test.
>
> [Where problems could occur]
>
> Problems could occur is dwc3 usb driver, when registering device.
>
> v2:
> added backporting details to Focal
>
> Miaoqian Lin (1):
>    usb: dwc3: dwc3-qcom: Add missing platform_device_put() in
>      dwc3_qcom_acpi_register_core
>
>   drivers/usb/dwc3/dwc3-qcom.c | 8 +++++++-
>   1 file changed, 7 insertions(+), 1 deletion(-)
>
Applied to jammy, focal master-next branches. Thanks!