ACK: [SRU][F][PATCH 0/1] CVE-2022-48863

[Manuel Diewald]

On Mon, Aug 12, 2024 at 04:19:52PM -0500, Bethany Jamison wrote:
> [Impact]
> 
> mISDN: Fix memory leak in dsp_pipeline_build()
> 
> dsp_pipeline_build() allocates dup pointer by kstrdup(cfg),
> but then it updates dup variable by strsep(&dup, "|").
> As a result when it calls kfree(dup), the dup variable contains NULL.
> 
> Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
> 
> [Fix]
> 
> Noble:	not-affected
> Jammy:	not-affected
> Focal:	Backport - ignored context conflict from neighboring line, should
> 	not affect fix
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	won't fix
> 
> [Test Case]
> 
> Compiled
> 
> [Where problems could occur]
> 
> This fix affects those who use pipelined audio processing, an issue with
> this fix would be visible to the user via a decrease in system performance.
> 
> Alexey Khoroshilov (1):
>   mISDN: Fix memory leak in dsp_pipeline_build()
> 
>  drivers/isdn/mISDN/dsp_pipeline.c | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
> 
> -- 
> 2.34.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Acked-by: Manuel Diewald <manuel.diewald at canonical.com>

-- 
 Manuel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240813/fca6f56a/attachment.sig>