From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6E82B6BFA5 for ; Sun, 28 Apr 2024 13:06:24 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1714309584; cv=none; b=C/hKGzHkB/2Knnyj4DBWS4wkmjhFgQory2DecuFikIyOc+r4gcds8+N9E204Kty+dDevO9u74mfPegH4QuJdstpZQxhPgTmnU+dsXogRNJqA/HVMK+DHBm73oEL2HsTuDp32fu98BgvqvH5UdhA0yF37rrXzTz04ZpvFhCX9ygc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1714309584; c=relaxed/simple; bh=w+D6+8EmEkyYmT4oDprqeFGFI6PBcAaVDBtHbg7av2k=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=gZhgwrrmwMJOH8hqOVrFXU7QfkioyZikWnXiVxgU3w2iVlqUTA3gDdbe94JLwKIxEEEv6zBC0xCKpYmL0co+6m5Rl4cryel2xVgKj6Yr43ISIWT3IJYsgLBr+K5u/mzB8N8l9u0lKCsbe5hGINhrZfPdCgfYtFfXAIRLQGLFEMY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=QWMFV3GZ; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="QWMFV3GZ" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 92295C113CC; Sun, 28 Apr 2024 13:06:23 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1714309584; bh=w+D6+8EmEkyYmT4oDprqeFGFI6PBcAaVDBtHbg7av2k=; h=From:To:Cc:Subject:Date:Reply-to:From; b=QWMFV3GZbJM/mFH9c3/E8ep88ho1lBoUFWc8aVPBhRTtdVO837IFMj7WBZi9gbraM rVIbDM/OgtyOko/8wgjY7suTky1NFvza1EHr2XELqQY+Ptk1Sy/iJeJ8+ApZJp6OwE 17lwgl/86GJJAKGAiLABT91pQgeXdbc608mRWys8= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-48663: gpio: mockup: fix NULL pointer dereference when removing debugfs Date: Sun, 28 Apr 2024 15:05:24 +0200 Message-ID: <2024042801-CVE-2022-48663-397d@gregkh> X-Mailer: git-send-email 2.44.0 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2211; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=w+D6+8EmEkyYmT4oDprqeFGFI6PBcAaVDBtHbg7av2k=; b=owGbwMvMwCRo6H6F97bub03G02pJDGl6nrWty/ZUaTn1LFy/8ITQRo3XElvVV4kJT5sjtnyy3 FKpPO2GjlgWBkEmBlkxRZYv23iO7q84pOhlaHsaZg4rE8gQBi5OAZiI4i2GBScM/D+LcH54/V5s +7pLVk0LInM2XWSYHyzEzaUQ8mWW0KTNU9/W34sQO3BzPgA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove the device's debugfs entries when unbinding the driver. This now causes a NULL-pointer dereference on module exit because the platform devices are unregistered *after* the global debugfs directory has been recursively removed. Fix it by unregistering the devices first. The Linux kernel CVE team has assigned CVE-2022-48663 to this issue. Affected and fixed versions =========================== Issue introduced in 5.10.144 with commit 3815e66c2183 and fixed in 5.10.146 with commit bdea98b98f84 Issue introduced in 5.15.69 with commit 3a10e8edee2b and fixed in 5.15.71 with commit 18352095a0d5 Issue introduced in 5.19.10 with commit bc55c1677edb and fixed in 5.19.12 with commit af0bfabf06c7 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-48663 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/gpio/gpio-mockup.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/bdea98b98f844bd8a983ca880893e509a8b4162f https://git.kernel.org/stable/c/18352095a0d581f6aeb1e9fc9d68cc0152cd64b4 https://git.kernel.org/stable/c/af0bfabf06c74c260265c30ba81a34e7dec0e881 https://git.kernel.org/stable/c/b7df41a6f79dfb18ba2203f8c5f0e9c0b9b57f68