In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driveroverrideshow() Fixed a possible UAF problem in driveroverrideshow() in drivers/cdx/cdx.c This function driveroverrideshow() is part of DEVICEATTRRW, which includes both driveroverrideshow() and driveroverridestore(). These functions can be executed concurrently in sysfs. The driveroverridestore() function uses driversetoverride() to update the driveroverride value, and driversetoverride() internally locks the device (devicelock(dev)). If driveroverrideshow() reads cdxdev->driveroverride without locking, it could potentially access a freed pointer if driveroverridestore() frees the string concurrently. This could lead to printing a kernel address, which is a security risk since DEVICEATTR can be read by all users. Additionally, a similar pattern is used in drivers/amba/bus.c, as well as many other bus drivers, where devicelock() is taken in the show function, and it has been working without issues. This potential bug was detected by our experimental static analysis tool, which analyzes locking APIs and paired functions to identify data races and atomicity violations.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-azure-6.11-headers-6.11.0-1018" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-azure-6.11-tools-6.11.0-1018" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-cloud-tools-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-headers-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1018-azure-dbgsym" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-modules-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-modules-extra-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure" }, { "binary_version": "6.11.0-1018.18~24.04.1", "binary_name": "linux-tools-6.11.0-1018-azure" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1016-gcp-64k" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-gcp-6.11-headers-6.11.0-1016" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-gcp-6.11-tools-6.11.0-1016" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-headers-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-headers-6.11.0-1016-gcp-64k" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k-dbgsym" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-dbgsym" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-modules-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-modules-6.11.0-1016-gcp-64k" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-modules-extra-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-modules-extra-6.11.0-1016-gcp-64k" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-tools-6.11.0-1016-gcp" }, { "binary_version": "6.11.0-1016.16~24.04.1", "binary_name": "linux-tools-6.11.0-1016-gcp-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-buildinfo-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-buildinfo-6.11.0-28-generic-64k" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-cloud-tools-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-headers-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-headers-6.11.0-28-generic-64k" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-28" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-hwe-6.11-headers-6.11.0-28" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-hwe-6.11-tools-6.11.0-28" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-image-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-image-6.11.0-28-generic-dbgsym" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k-dbgsym" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-28-generic-dbgsym" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-6.11.0-28-generic-64k" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-extra-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-ipu6-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-ipu7-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-iwlwifi-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-usbio-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-modules-vision-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-tools-6.11.0-28-generic" }, { "binary_version": "6.11.0-28.28~24.04.1", "binary_name": "linux-tools-6.11.0-28-generic-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency-64k" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-cloud-tools-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-headers-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-headers-6.11.0-1015-lowlatency-64k" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k-dbgsym" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-dbgsym" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1015" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1015" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1015" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-modules-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-modules-6.11.0-1015-lowlatency-64k" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-modules-iwlwifi-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-tools-6.11.0-1015-lowlatency" }, { "binary_version": "6.11.0-1015.16~24.04.2", "binary_name": "linux-tools-6.11.0-1015-lowlatency-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.11.0-1012.12", "binary_name": "linux-buildinfo-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-buildinfo-6.11.0-1012-nvidia-64k" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-headers-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-headers-6.11.0-1012-nvidia-64k" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-image-unsigned-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-image-unsigned-6.11.0-1012-nvidia-64k" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-image-unsigned-6.11.0-1012-nvidia-64k-dbgsym" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-image-unsigned-6.11.0-1012-nvidia-dbgsym" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-modules-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-modules-6.11.0-1012-nvidia-64k" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-modules-extra-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-modules-extra-6.11.0-1012-nvidia-64k" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-modules-nvidia-fs-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-modules-nvidia-fs-6.11.0-1012-nvidia-64k" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-nvidia-6.11-headers-6.11.0-1012" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-nvidia-6.11-tools-6.11.0-1012" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-tools-6.11.0-1012-nvidia" }, { "binary_version": "6.11.0-1012.12", "binary_name": "linux-tools-6.11.0-1012-nvidia-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.11.0-1024.24", "binary_name": "linux-buildinfo-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-headers-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-image-unsigned-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-image-unsigned-6.11.0-1024-oem-dbgsym" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-modules-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-modules-ipu6-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-modules-ipu7-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-modules-iwlwifi-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-modules-usbio-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-modules-vision-6.11.0-1024-oem" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-oem-6.11-headers-6.11.0-1024" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-oem-6.11-tools-6.11.0-1024" }, { "binary_version": "6.11.0-1024.24", "binary_name": "linux-tools-6.11.0-1024-oem" } ] }