Bug 2214184

Summary:	kernel: use after free bug in bq24190_remove due to race condition
Product:	[Other] Security Response	Reporter:	Alex <allarkin>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	acaringi, allarkin, bhu, chwhite, crwood, dbohanno, ddepaula, debarbos, dfreiber, drow, dvlasenk, ezulian, hkrzesin, jarod, jburrell, jdenham, jfaracco, jferlan, jforbes, jlelli, joe.lawrence, jshortt, jstancek, jwyatt, kcarcia, kernel-mgr, ldoskova, lgoncalv, lleshchi, lzampier, nmurray, ptalbert, qzhao, rogbas, rrobaina, rvrbovsk, rysulliv, scweaver, tyberry, vkumar, walters, wcosta, williams, wmealing, ycote
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-06-12 20:18:43 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2214185
Bug Blocks:	2196106

Description Alex 2023-06-12 08:55:57 UTC

A flaw found in the Linux Kernel. When external power changed, and bq24190_charger_external_power_changed being used, and then remove the module which will call bq24190_remove to make cleanup, there may be a unfinished work.

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=2186068
https://lore.kernel.org/lkml/20230309174728.233732-1-zyytlz.wz@163.com/

Comment 1 Alex 2023-06-12 08:56:26 UTC

Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2214185]

Comment 4 Justin M. Forbes 2023-06-12 13:13:04 UTC

This was fixed for Fedora with the 6.2.9 stable kernel update.