blob: 626dec1326602b70f58300897872f41311b3f4a7 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
Description: dmabuf: fix use-after-free of dmabuf's file->f_inode
References:
https://source.android.com/security/bulletin/2022-04-01
Notes:
carnil> Commit fixes 4ab59c3c638c ("dma-buf: Move dma_buf_release()
carnil> from fops to dentry_ops") in 5.8-rc1 (but backported as well to
carnil> 5.7.8 and 5.4.51).
Bugs:
upstream: released (5.11-rc3) [05cd84691eafcd7959a1e120d5e72c0dd98c5d91]
5.10-upstream-stable: released (5.10.7) [a19dae4254c434a1ac8937a809fe08fd15ad3be5]
4.19-upstream-stable: N/A "Vulnerable code not present"
4.9-upstream-stable: N/A "Vulnerable code not present"
sid: released (5.10.9-1)
5.10-bullseye-security: N/A "Fixed before branching point"
4.19-buster-security: N/A "Vulnerable code not present"
4.9-stretch-security: N/A "Vulnerable code not present"
|