High · published March 1, 2024
In the Linux kernel, the following vulnerability has been resolved:
mtd: require write permissions for locking and badblock ioctls
MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require
write permission. Depending on the hardware MEMLOCK might even be
write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK
is always write-once.
MEMSETBADBLOCK modifies the bad block table.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.4.233, < 4.4.269 | 4.4.269 |
| linux/linux_kernel | ≥ 4.9.233, < 4.9.269 | 4.9.269 |
| linux/linux_kernel | ≥ 4.14.194, < 4.14.233 | 4.14.233 |
| linux/linux_kernel | ≥ 4.19.139, < 4.19.191 | 4.19.191 |
| linux/linux_kernel | ≥ 5.4.58, < 5.4.119 | 5.4.119 |
| linux/linux_kernel | ≥ 5.9, < 5.10.37 | 5.10.37 |
| linux/linux_kernel | ≥ 5.11, < 5.11.21 | 5.11.21 |
| linux/linux_kernel | ≥ 5.12, < 5.12.4 | 5.12.4 |