High · published February 26, 2024
In the Linux kernel, the following vulnerability has been resolved:
i2c: Fix a potential use after free
Free the adap structure only after we are done using it.
This patch just moves the put_device() down a bit to avoid the
use after free.
[wsa: added comment to the code, added Fixes tag]
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.3.0, < 4.14.291 | 4.14.291 |
| linux/linux_kernel | ≥ 4.15.0, < 4.19.256 | 4.19.256 |
| linux/linux_kernel | ≥ 4.20.0, < 5.4.211 | 5.4.211 |
| linux/linux_kernel | ≥ 5.5.0, < 5.10.137 | 5.10.137 |
| linux/linux_kernel | ≥ 5.11.0, < 5.15.61 | 5.15.61 |
| linux/linux_kernel | ≥ 5.16.0, < 5.18.18 | 5.18.18 |
| linux/linux_kernel | ≥ 5.19.0, < 5.19.2 | 5.19.2 |