High · published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.9, < 4.9.285 | 4.9.285 |
| linux/linux_kernel | ≥ 4.10, < 4.14.249 | 4.14.249 |
| linux/linux_kernel | ≥ 4.15, < 4.19.209 | 4.19.209 |
| linux/linux_kernel | ≥ 4.20, < 5.4.150 | 5.4.150 |
| linux/linux_kernel | ≥ 5.5, < 5.10.70 | 5.10.70 |
| linux/linux_kernel | ≥ 5.11, < 5.14.9 | 5.14.9 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |