High · published July 3, 2025
In the Linux kernel, the following vulnerability has been resolved:
dma-buf: insert memory barrier before updating num_fences
smp_store_mb() inserts memory barrier after storing operation.
It is different with what the comment is originally aiming so Null
pointer dereference can be happened if memory update is reordered.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.0, < 5.10.241 | 5.10.241 |
| linux/linux_kernel | ≥ 5.11, < 5.15.192 | 5.15.192 |
| linux/linux_kernel | ≥ 5.16, < 6.1.140 | 6.1.140 |
| linux/linux_kernel | ≥ 6.2, < 6.6.92 | 6.6.92 |
| linux/linux_kernel | ≥ 6.7, < 6.12.30 | 6.12.30 |
| linux/linux_kernel | ≥ 6.13, < 6.14.8 | 6.14.8 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| debian/debian_linux | all versions | — |