Bug 2141676 - kernel: hamradio: race condition or use after free in mkiss.c and 6pack.c when a mkiss or a sixpack device is detaching
Summary: kernel: hamradio: race condition or use after free in mkiss.c and 6pack.c whe...
Keywords:
Status: CLOSED DUPLICATE of bug 2056381
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2141677
Blocks: 2141373
TreeView+ depends on / blocked
 
Reported: 2022-11-10 12:45 UTC by Alex
Modified: 2022-11-10 14:04 UTC (History)
20 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-11-10 14:04:34 UTC
Embargoed:

Attachments (Terms of Use)

Description Alex 2022-11-10 12:45:01 UTC 
A flaw use after free in the Linux Kernel found for the hamradio (amateur radio and similar) when a mkiss or a sixpack device is detaching.
There are few parts of source code where it can happen, and the fixes for the mkiss.c and 6pack.c of the driver net hamradio.

References:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b2f37aead1b82a770c48b5d583f35ec22aabb61e
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81b1d548d00bcd028303c4f3150fa753b9b8aa71
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b9111922b1f399aba6ed1e1b8f2079c3da1aed8
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e0588c291d6ce225f2b891753ca41d45ba42469
Comment 1 Alex 2022-11-10 12:45:25 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2141677]
Note You need to log in before you can comment on or make changes to this bug.