In the Linux kernel, the following vulnerability has been resolved:
iio: light: isl29028: Fix the warning in isl29028_remove()
The driver use the non-managed form of the register function in isl29028_remove(). To keep the release order as mirroring the ordering in probe, the driver should use non-managed form in probe, too.
The following log reveals it:
[ 32.374955] isl29028 0-0010: remove [ 32.376861] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI [ 32.377676] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 32.379432] RIP: 0010:kernfsfindandgetns+0x28/0xe0 [ 32.385461] Call Trace: [ 32.385807] sysfsunmergegroup+0x59/0x110 [ 32.386110] dpmsysfsremove+0x58/0xc0 [ 32.386391] devicedel+0x296/0xe50 [ 32.386959] cdevdevicedel+0x1d/0xd0 [ 32.387231] devmiiodeviceunreg+0x27/0xb0 [ 32.387542] devresreleasegroup+0x319/0x3d0 [ 32.388162] i2cdeviceremove+0x93/0x1f0
{ "vanir_signatures": [ { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-1315c737", "digest": { "length": 1612.0, "function_hash": "93469281722250081138605493225023167214" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@359f3b150eab30805fe0e4e9d616887d7257a625", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-32a7b924", "digest": { "length": 1612.0, "function_hash": "93469281722250081138605493225023167214" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed43fb20d3d1fca9d79db0d5faf4321a4dd58c23", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-389e7aae", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@359f3b150eab30805fe0e4e9d616887d7257a625", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-4688197c", "digest": { "length": 1612.0, "function_hash": "93469281722250081138605493225023167214" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca63d5abf404d2934e2ac03545350de7bb8c8e96", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-5624d8ea", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f0ebfb4b9bfad2326c0b2c3cc7e37f4b9ee9eba", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-7fb67be0", "digest": { "length": 1573.0, "function_hash": "225892510348568602913930083196709229768" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fac589fb764699a4bcd288f6656b8cd0408ea968", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-82d4f6fa", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb1888205c0782f287e5dd4ffff1f665332e868c", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-8f486bbf", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06674fc7c003b9d0aa1d37fef7ab2c24802cc6ad", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-974efb9e", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca63d5abf404d2934e2ac03545350de7bb8c8e96", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-a011e606", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed43fb20d3d1fca9d79db0d5faf4321a4dd58c23", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-ac1aba32", "digest": { "length": 1573.0, "function_hash": "225892510348568602913930083196709229768" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a1135205b0affd255510775a27df571aca84ab4b", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-b6bff45b", "digest": { "length": 1573.0, "function_hash": "225892510348568602913930083196709229768" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06674fc7c003b9d0aa1d37fef7ab2c24802cc6ad", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-ba75cb89", "digest": { "length": 1573.0, "function_hash": "225892510348568602913930083196709229768" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb1888205c0782f287e5dd4ffff1f665332e868c", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-d11ae843", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a1135205b0affd255510775a27df571aca84ab4b", "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/iio/light/isl29028.c", "function": "isl29028_probe" }, "id": "CVE-2022-50218-e6c20aae", "digest": { "length": 1573.0, "function_hash": "225892510348568602913930083196709229768" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f0ebfb4b9bfad2326c0b2c3cc7e37f4b9ee9eba", "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/iio/light/isl29028.c" }, "id": "CVE-2022-50218-f5ff2afb", "digest": { "threshold": 0.9, "line_hashes": [ "189495349476539527791572479364484876171", "223181105141535453188036396930721859886", "147613334863655421928312285946594612201", "91413957965835923013175296030768899765" ] }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fac589fb764699a4bcd288f6656b8cd0408ea968", "signature_version": "v1" } ] }