CVE-2022-50250
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix use_count leakage when handling boot-on I found a use_count leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.
How to fix
- linux linux_kernel4.19.270, 5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2 or later
- git.kernel.org/stable/c/0591b14ce0398125439c759f889647369aa616a0
- git.kernel.org/stable/c/4b737246ff50f810d6ab4be13c1388a07f0c14b1
- git.kernel.org/stable/c/4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347
- git.kernel.org/stable/c/5bfc53df288e8ea54ca6866fb92034214940183f
- git.kernel.org/stable/c/bc6c381df5793ebcf32db88a3e65acf7870379fc
- git.kernel.org/stable/c/dc3391d49479bc2bf8a2b88dbf86fdd800882fee
- git.kernel.org/stable/c/feb847e6591e8c7a09cc39721cc9ca74fd9a5d80
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v < 4.19.270, 4.20 ≤ v < 5.4.229, 5.5 ≤ v < 5.10.163, 5.11 ≤ v < 5.15.86, 5.16 ≤ v < 6.0.16, 6.1 ≤ v < 6.1.2 | 4.19.270, 5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.