ACK: [SRU][F][PATCH 0/1] CVE-2021-47188

[Kuan-Ying Lee]

On Fri, Aug 09, 2024 at 12:50:36PM -0500, Bethany Jamison wrote:
> [Impact]
> 
> scsi: ufs: core: Improve SCSI abort handling
> 
> The following has been observed on a test setup:
> 
> WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c
> Call trace:
>  ufshcd_queuecommand+0x468/0x65c
>  scsi_send_eh_cmnd+0x224/0x6a0
>  scsi_eh_test_devices+0x248/0x418
>  scsi_eh_ready_devs+0xc34/0xe58
>  scsi_error_handler+0x204/0x80c
>  kthread+0x150/0x1b4
>  ret_from_fork+0x10/0x30
> 
> That warning is triggered by the following statement:
> 
> 	WARN_ON(lrbp->cmd);
> 
> Fix this warning by clearing lrbp->cmd from the abort handler.
> 
> [Fix]
> 
> Noble:	not-affected
> Jammy:	not-affected
> Focal:	Backport from linux-5.15.y - the code structure has changed
> 	upstream and so I had to insert the fix changes into the
> 	appropriate section of the code
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	won't fix
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects those who use the Universal Flash Storage Host 
> controller driver Core, an issue with this fix would be visible to
> the user via a PANIC_ON_OOPS which will trigger a reboot.
> 
> Bart Van Assche (1):
>   scsi: ufs: core: Improve SCSI abort handling
> 
>  drivers/scsi/ufs/ufshcd.c | 2 ++
>  1 file changed, 2 insertions(+)

Acked-by: Kuan-Ying Lee <kuan-ying.lee at canonical.com>