Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
phylib: fix potential use-after-free
Commit bafbdd527d56 (“phylib: Add device reset GPIO support”) added call to phy_device_reset(phydev) after the put_device() call in phy_detach().
The comment before the put_device() call says that the phydev might go away with put_device().
Fix potential use-after-free by calling phy_device_reset() before put_device().
Details
- Affected product:
- AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Oracle Linux 6 ELS , TuxCare 9.6 ESU
- Affected packages:
- kernel @ 3.10.0 (+10 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 8 | Released |
43 kernels
|
| AlmaLinux 9.2 ESU | Released |
22 kernels
|
| Amazon Linux 2 5.10 | Will Not Fix | — |
| Amazon Linux 2 5.4 | Will Not Fix | — |
| CentOS 8 | Released |
33 kernels
|
| CloudLinux OS 7h | Released |
60 kernels
|
| CloudLinux OS 8 | Released |
56 kernels
|
| Debian 10 | Will Not Fix | — |
| Debian 10 cloud | Will Not Fix | — |
| Debian 11 | Planned | — |
| Oracle Linux 8 | Released |
68 kernels
|
| RHEL 8 | Released |
64 kernels
|
| Rocky Linux 8 | Released |
38 kernels
|
| Ubuntu 18.04 AWS Focal | Will Not Fix | — |
| Ubuntu 18.04 Azure Focal | Will Not Fix | — |
| Ubuntu 18.04 HWE Focal | Will Not Fix | — |
| Ubuntu 20.04 | Will Not Fix | — |
| Ubuntu 20.04 AWS | Will Not Fix | — |