High · published April 28, 2024
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup
pointer being NULL.
The pavgroup pointer is checked on the entrance of the function but
without the lcu->lock being held. Therefore there is a race window
between dasd_alias_get_start_dev() and _lcu_update() which sets
pavgroup to NULL with the lcu->lock held.
Fix by checking the pavgroup pointer with lcu->lock held.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 2.6.25, < 4.9.330 | 4.9.330 |
| linux/linux_kernel | ≥ 4.10, < 4.14.295 | 4.14.295 |
| linux/linux_kernel | ≥ 4.15, < 4.19.260 | 4.19.260 |
| linux/linux_kernel | ≥ 4.20, < 5.4.215 | 5.4.215 |
| linux/linux_kernel | ≥ 5.5, < 5.10.146 | 5.10.146 |
| linux/linux_kernel | ≥ 5.11, < 5.15.71 | 5.15.71 |
| linux/linux_kernel | ≥ 5.16, < 5.19.12 | 5.19.12 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |