Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding the driver, another kthreadcros_ec_console_log_work
is still accessing the device, resulting an UAF and crash.
The driver doesn’t unregister the EC device in .remove() which should
shutdown sub-devices synchronously. Fix it.
Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 11 | Will Not Fix | — |
| Debian 11 cloud | Will Not Fix | — |
| Debian 12 | Planned | — |
| Debian 13 | Planned | — |
| Ubuntu 22.04 | Planned | — |
| Ubuntu 22.04 AWS | Planned | — |
| Ubuntu 24.04 | Planned | — |
| Ubuntu 24.04 AWS | Planned | — |