APPLIED: [SRU][F][PATCH v2 0/2] CVE-2024-27051

[Stefan Bader]

On 10.09.24 13:25, Koichiro Den wrote:
> [Impact]
> 
> cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
> 
> cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it
> and return 0 in case of error.
> 
> Found by Linux Verification Center (linuxtesting.org) with SVACE.
> 
> [Backport]
> 
> The primary fix commit had a compile-time warning issue, which on
> upstream was fixed by later commit fa7bd98f3c8b ("cpufreq:
> brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations").
> Both of them are backported with context adjustments.
> 
> [Fix]
> 
> Noble:  not affected
> Jammy:  fixed via stable
> Focal:  Backport - cleanly applied with one follow-up fix, see [Backport]
> Bionic: fix sent to esm ML
> Xenial: not affected
> Trusty: not affected
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects Broadcom STB SoCs that use AVS firmware with DFS and
> DVFS support, an issue with this fix potentially would be visible to
> user via a system crash due to null pointer dereference.
> 
> [Notes]
> 
> v2:
>    - Fix commit messages and cover letter (cherry-picked -> backported)
> 
> 
> Anastasia Belova (1):
>    cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return
>      value
> 
> Portia Stephens (1):
>    cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations
> 
>   drivers/cpufreq/brcmstb-avs-cpufreq.c | 7 ++++++-
>   1 file changed, 6 insertions(+), 1 deletion(-)
> 

Applied to focal:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240913/53a0fc59/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240913/53a0fc59/attachment-0001.sig>