CVE-2023-54310
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition mptlan_probe() calls mpt_register_lan_device() which initializes the &priv->post_buckets_task workqueue. A call to mpt_lan_wake_post_buckets_task() will subsequently start the work. During driver unload in mptlan_remove() the following race may occur: CPU0 CPU1 |mpt_lan_post_receive_buckets_work() mptlan_remove() | free_netdev() | kfree(dev); | | | dev->mtu | //use Fix this by finishing the work prior to cleaning up in mptlan_remove(). [mkp: we really should remove mptlan instead of attempting to fix it]
How to fix
- Linux Linux92f869693d84e813895ff4d25363744575515423, 60c8645ad6f5b722615383d595d63b62b07a13c3, 410e610a96c52a7b41e2ab6c9ca60868d9acecce, 697f92f8317e538d8409a0c95d6370eb40b34c05, e84282efc87f2414839f6e15c31b4daa34ebaac1, 9c6da3b7f12528cd52c458b33496a098b838fcfc, 48daa4a3015d859ee424948844ce3c12f2fe44e6, f486893288f3e9b171b836f43853a6426515d800 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 92f869693d84e813895ff4d25363744575515423, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 60c8645ad6f5b722615383d595d63b62b07a13c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 410e610a96c52a7b41e2ab6c9ca60868d9acecce, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 697f92f8317e538d8409a0c95d6370eb40b34c05, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < e84282efc87f2414839f6e15c31b4daa34ebaac1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 9c6da3b7f12528cd52c458b33496a098b838fcfc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 48daa4a3015d859ee424948844ce3c12f2fe44e6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < f486893288f3e9b171b836f43853a6426515d800, 2.6.12 | 92f869693d84e813895ff4d25363744575515423, 60c8645ad6f5b722615383d595d63b62b07a13c3, 410e610a96c52a7b41e2ab6c9ca60868d9acecce, 697f92f8317e538d8409a0c95d6370eb40b34c05, e84282efc87f2414839f6e15c31b4daa34ebaac1, 9c6da3b7f12528cd52c458b33496a098b838fcfc, 48daa4a3015d859ee424948844ce3c12f2fe44e6, f486893288f3e9b171b836f43853a6426515d800 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.