summaryrefslogtreecommitdiffstats
path: root/active/CVE-2024-26866
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2024-04-17 19:42:10 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2024-04-17 19:42:10 +0200
commit340814e1a325812027f37a78f5052c8c470caa62 (patch)
tree7ef5ef0ab7ed2d3c56b2a1da4e9fb0373757586a /active/CVE-2024-26866
parent16ca5f383c524df1ff66a64d96eba1266dd6e1dc (diff)
Add batch of CVEs from CNA
Diffstat (limited to 'active/CVE-2024-26866')
-rw-r--r--active/CVE-2024-2686617
1 files changed, 17 insertions, 0 deletions
diff --git a/active/CVE-2024-26866 b/active/CVE-2024-26866
new file mode 100644
index 00000000..7f8b8f13
--- /dev/null
+++ b/active/CVE-2024-26866
@@ -0,0 +1,17 @@
+Description: spi: lpspi: Avoid potential use-after-free in probe()
+References:
+Notes:
+ carnil> Introduced in 5314987de5e5 ("spi: imx: add lpspi bus driver"). Vulnerable
+ carnil> versions: 4.10-rc1.
+Bugs:
+upstream: released (6.9-rc1) [2ae0ab0143fcc06190713ed81a6486ed0ad3c861]
+6.8-upstream-stable: released (6.8.2) [996ce839606afd0fef91355627868022aa73eb68]
+6.7-upstream-stable: released (6.7.11) [1543418e82789cc383cd36d41469983c64e3fc7f]
+6.6-upstream-stable: released (6.6.23) [da83ed350e4604b976e94239b08d8e2e7eaee7ea]
+6.1-upstream-stable: needed
+5.10-upstream-stable: needed
+4.19-upstream-stable: needed
+sid: needed
+6.1-bookworm-security: needed
+5.10-bullseye-security: needed
+4.19-buster-security: needed

© 2014-2024 Faster IT GmbH | imprint | privacy policy