ACK: [SRU][F][PATCH v2 0/2] CVE-2024-27051

[Andrei Gherzan]

On 24/09/10 08:25pm, Koichiro Den wrote:
> [Impact]
> 
> cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
> 
> cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it
> and return 0 in case of error.
> 
> Found by Linux Verification Center (linuxtesting.org) with SVACE.
> 
> [Backport]
> 
> The primary fix commit had a compile-time warning issue, which on
> upstream was fixed by later commit fa7bd98f3c8b ("cpufreq:
> brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations").
> Both of them are backported with context adjustments.
> 
> [Fix]
> 
> Noble:  not affected
> Jammy:  fixed via stable
> Focal:  Backport - cleanly applied with one follow-up fix, see [Backport]
> Bionic: fix sent to esm ML
> Xenial: not affected
> Trusty: not affected
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects Broadcom STB SoCs that use AVS firmware with DFS and
> DVFS support, an issue with this fix potentially would be visible to
> user via a system crash due to null pointer dereference.
> 
> [Notes]
> 
> v2:
>   - Fix commit messages and cover letter (cherry-picked -> backported)
> 
> 
> Anastasia Belova (1):
>   cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return
>     value
> 
> Portia Stephens (1):
>   cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations

Acked-by: Andrei Gherzan <andrei.gherzan at canonical.com>

-- 
Andrei Gherzan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240911/966f26de/attachment-0001.sig>