]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c39ed86) | patch
HSI: core: Fix return freed object in hsi_new_client
authorChengfeng Ye <cyeaa@connect.ust.hk>
Fri, 5 Nov 2021 13:45:07 +0000 (06:45 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 27 Jan 2022 07:46:17 +0000 (08:46 +0100)
commitc1b4f58686ccebd52a2ad1896335d42b4c18f2e7
tree11c7b46cf57f65b50d1bedf22709f8983b6b5d49tree
parentc39ed869df64461602813a711a5eec9966fb95d9commit | diff
HSI: core: Fix return freed object in hsi_new_client

[ Upstream commit a1ee1c08fcd5af03187dcd41dcab12fd5b379555 ]

cl is freed on error of calling device_register, but this
object is return later, which will cause uaf issue. Fix it
by return NULL on error.

Signed-off-by: Chengfeng Ye <cyeaa@connect.ust.hk>
Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/hsi/hsi.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git