NACK[Focal]: [SRU][Jammy][Focal][PATCH 0/1] CVE-2023-4134

[Roxana Nicolescu]

On 18/01/2024 17:37, Roxana Nicolescu wrote:
>
> On 09/01/2024 15:16, Bethany Jamison wrote:
>> [Impact]
>>
>> It was discovered that a race condition existed in the Cypress 
>> touchscreen
>> driver in the Linux kernel during device removal, leading to a 
>> use-after-
>> free vulnerability. A physically proximate attacker could use this to 
>> cause
>> a denial of service (system crash) or possibly execute arbitrary code.
>>
>> [Fix]
>>
>> Clean cherry-pick.
>>
>> [Test Case]
>>
>> Compile and boot test.
>>
>> [Where problems could occur]
>>
>> Issues could happen when a Cypress touchscreen device or driver is 
>> removed.
>>
>> Duoming Zhou (1):
>>    Input: cyttsp4_core - change del_timer_sync() to 
>> timer_shutdown_sync()
>>
>>   drivers/input/touchscreen/cyttsp4_core.c | 3 +--
>>   1 file changed, 1 insertion(+), 2 deletions(-)
>>
> It breaks the build. Another commit is required. A v2 will be sent 
> shortly.
Only for focal. Lunar is fine.