ACPI: custom_method: fix potential use-after-free issue (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.23 % · percentile 14 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always freed when reaching the end of the function. If the requested count is less than table.length, the allocated buffer will be freed but subsequent calls to cm_write() will still try to access it. Remove the unconditional kfree(buf) at the end of the function and set the buf to NULL in the -EINVAL error path to match the rest of function.
Weaknesses (CWE)
- CWE-416 — Use After Free
References
- https://git.kernel.org/stable/c/1d53ca5d131074c925ce38361fb0376d3bf7e394
- https://git.kernel.org/stable/c/8b04d57f30caf76649d0567551589af9a66ca9be
- https://git.kernel.org/stable/c/90575d1d9311b753cf1718f4ce9061ddda7dfd23
- https://git.kernel.org/stable/c/a5b26a2e362f572d87e9fd35435680e557052a17
- https://git.kernel.org/stable/c/72814a94c38a33239793f7622cec6ace1e540c4b
- https://git.kernel.org/stable/c/62dc2440ebb552aa0d7f635e1697e077d9d21203
- https://git.kernel.org/stable/c/f16737caf41fc06cfe6e49048becb09657074d4b
- https://git.kernel.org/stable/c/b7a5baaae212a686ceb812c32fceed79c03c0234
- https://git.kernel.org/stable/c/e483bb9a991bdae29a0caa4b3a6d002c968f94aa
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-33614
- GCVE · GCVE-0-2021-46966
CERT-FR advisories
- CERTFR-2024-AVI-0458 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0440 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0420 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0352 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0265 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0242 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.4.195 < 4.4.269cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.9.195 < 4.9.269cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.14.147 < 4.14.233cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.77 < 4.19.191cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4 < 5.4.118cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.36cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.11.20cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.12 < 5.12.3
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 4bda2b79a9d04c8ba31681c66e95877dbb433416 < 1d53ca5d131074c925ce38361fb0376d3bf7e394 ; affected 5c12dadcbef8cd55ef1f5dac799bfcbb7ea7db1d < 8b04d57f30caf76649d0567551589af9a66ca9be ; affected 35b88a10535edcf62d3e6b7893a8cd506ff98a24 < 90575d1d9311b753cf1718f4ce9061ddda7dfd23 ; affected e4467fb6ef547aa352dc03397f9474ec84eced5b < a5b26a2e362f572d87e9fd35435680e557052a17 ; affected 03d1571d9513369c17e6848476763ebbd10ec2cb < 72814a94c38a33239793f7622cec6ace1e540c4b ; affected 03d1571d9513369c17e6848476763ebbd10ec2cb < 62dc2440ebb552aa0d7f635e1697e077d9d21203 |
| Linux · Linux | affected 5.4 ; unaffected 0 < 5.4 ; unaffected 4.4.269 ≤ 4.4.* ; unaffected 4.9.269 ≤ 4.9.* ; unaffected 4.14.233 ≤ 4.14.* ; unaffected 4.19.191 ≤ 4.19.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |