summaryrefslogtreecommitdiffstats
path: root/active/CVE-2022-3903
blob: 476d2ff3688e5eaec0d5683771c7cf0491926b04 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
Description: An invalid pipe direction in the mceusb driver cause the kernel to DOS
References:
 https://bugzilla.redhat.com/show_bug.cgi?id=2140985
 https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA@mail.gmail.com/
 https://lore.kernel.org/all/E1obysd-009Grw-He@www.linuxtv.org/
Notes:
 carnil> Apparently the fix was already done in 6.0-rc4 with 608e58a0f461
 carnil> ("media: mceusb: Use new usb_control_msg_*() routines") but
 carnil> then changes lost and redone in 6.1-rc2. The former was
 carnil> backported to various stable series. I'm not sure what happened
 carnil> here.
Bugs:
upstream: released (6.1-rc2) [41fd1cb6151439b205ac7611883d85ae14250172]
6.1-upstream-stable: N/A "Fixed before branch point"
5.10-upstream-stable: released (5.10.142) [587f793c64d99d92be8ef01c4c69d885a3f2edb6]
4.19-upstream-stable: needed
sid: released (5.19.11-1)
6.1-bookworm-security: N/A "Fixed before branch point"
5.10-bullseye-security: released (5.10.148-1)
4.19-buster-security: needed

© 2014-2024 Faster IT GmbH | imprint | privacy policy