[PATCH 0/1] [B/C] Fix for CVE-2019-12819
Benjamin M Romer
benjamin.romer at canonical.com
Fri Jul 5 19:21:20 UTC 2019
One-liner CVE fix, clean cherry-pick for b/c, already pending in x.
Description:
An issue was discovered in the Linux kernel before 5.0. The function
__mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(),
which will trigger a fixed_mdio_bus_init use-after-free. This will cause a
denial of service.
YueHaibing (1):
mdio_bus: Fix use-after-free on device_register fails
drivers/net/phy/mdio_bus.c | 1 -
1 file changed, 1 deletion(-)
--
2.20.1
More information about the kernel-team
mailing list